98,920 indexed
CVECVE vulnerabilities
98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,051–7,100 of 98,920 · page 142 of 1979
| ID | Title | Summary |
|---|---|---|
| CVE-2026-87733 | CVE-2026-87733 CVSS 6.2 | An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encodi… |
| CVE-2026-87732 | CVE-2026-87732 CVSS 6.2 | An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into funct… |
| CVE-2026-87730 | CVE-2026-87730 | Rejected reason: this is rejected |
| CVE-2026-87727 | CVE-2026-87727 CVSS 6.5 | a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the a… |
| CVE-2026-87726 | CVE-2026-87726 CVSS 3.9 | Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party … |
| CVE-2026-87724 | CVE-2026-87724 CVSS 6.5 | Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) … |
| CVE-2026-87723 | CVE-2026-87723 | In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writabl… |
| CVE-2026-87722 | CVE-2026-87722 | Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, … |
| CVE-2026-87721 | CVE-2026-87721 | Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g) in Gerrit Code Review versions 2.0.19 through … |
| CVE-2026-87720 | CVE-2026-87720 | Incorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ProjectCache eviction logic (ProjectCacheImpl) in Gerrit Code … |
| CVE-2026-87719 | CVE-2026-87719 CVSS 9.9gitlab | GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 1… |
| CVE-2026-87716 | CVE-2026-87716 CVSS 7.5 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. |
| CVE-2026-87715 | CVE-2026-87715 CVSS 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87714 | CVE-2026-87714 CVSS 6.5 | Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-87713 | CVE-2026-87713 CVSS 7.5 | Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-87712 | CVE-2026-87712 CVSS 7.8 | Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87711 | CVE-2026-87711 CVSS 7.8 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87710 | CVE-2026-87710 CVSS 7.0 | Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87709 | CVE-2026-87709 CVSS 5.5 | Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. |
| CVE-2026-87708 | CVE-2026-87708 CVSS 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87707 | CVE-2026-87707 CVSS 7.8 | Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87706 | CVE-2026-87706 CVSS 7.8 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87705 | CVE-2026-87705 CVSS 7.4 | Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent net… |
| CVE-2026-87704 | CVE-2026-87704 CVSS 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87702 | CVE-2026-87702 CVSS 7.8 | Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87701 | CVE-2026-87701 CVSS 9.6microsoft | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate … |
| CVE-2026-87700 | CVE-2026-87700 CVSS 7.8 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-8770 | CVE-2026-8770 CVSS 3.3continue | A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations/lsTool.ts of the c… |
| CVE-2026-87699 | CVE-2026-87699 CVSS 7.8 | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87698 | CVE-2026-87698 CVSS 5.5 | Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. |
| CVE-2026-87697 | CVE-2026-87697 CVSS 8.8 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-87696 | CVE-2026-87696 CVSS 7.5 | Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-87695 | CVE-2026-87695 CVSS 7.8 | Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87694 | CVE-2026-87694 CVSS 7.8 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87693 | CVE-2026-87693 CVSS 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87692 | CVE-2026-87692 CVSS 7.8 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87691 | CVE-2026-87691 CVSS 7.8 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87690 | CVE-2026-87690 CVSS 8.8 | The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpo… |
| CVE-2026-8769 | CVE-2026-8769 CVSS 4.3vercel | A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the … |
| CVE-2026-87689 | CVE-2026-87689 CVSS 9.8 | The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route … |
| CVE-2026-87688 | CVE-2026-87688 CVSS 6.8broadcom | An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processi… |
| CVE-2026-87687 | CVE-2026-87687 CVSS 7.3broadcom | An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with … |
| CVE-2026-87686 | CVE-2026-87686 CVSS 4.3broadcom | An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web di… |
| CVE-2026-87685 | CVE-2026-87685 CVSS 6.8broadcom | An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a… |
| CVE-2026-87684 | CVE-2026-87684 CVSS 9.8broadcom | A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SN… |
| CVE-2026-87683 | CVE-2026-87683 CVSS 8.8broadcom | Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing … |
| CVE-2026-87682 | CVE-2026-87682 CVSS 8.8broadcom | Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. In… |
| CVE-2026-87681 | CVE-2026-87681 CVSS 6.3broadcom | An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When proce… |
| CVE-2026-87680 | CVE-2026-87680 CVSS 8.8broadcom | A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbi… |
| CVE-2026-8768 | CVE-2026-8768 CVSS 7.3vercel | A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-… |