103,766 indexed
CVECVE vulnerabilities
103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 8,751–8,800 of 103,766 · page 176 of 2076
| ID | Title | Summary |
|---|---|---|
| CVE-2026-85456 | CVE-2026-85456 CVSS 5.5mit | MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the … |
| CVE-2026-85455 | CVE-2026-85455 CVSS 8.2themoos | MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during de… |
| CVE-2026-85454 | CVE-2026-85454 CVSS 6.1themoos | MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that writes a NUL terminator one byte past the serial … |
| CVE-2026-85453 | CVE-2026-85453 CVSS 6.1themoos | MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts. Any MOOS publ… |
| CVE-2026-85452 | CVE-2026-85452 CVSS 8.8 | MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into … |
| CVE-2026-85451 | CVE-2026-85451 CVSS 7.1themoos | MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multic… |
| CVE-2026-85450 | CVE-2026-85450 CVSS 7.5themoos | MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and threads without limit… |
| CVE-2026-85449 | CVE-2026-85449 CVSS 7.5mit | MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, allowing attackers to exhaust memory by s… |
| CVE-2026-85448 | CVE-2026-85448 CVSS 7.5mit | MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A… |
| CVE-2026-85447 | CVE-2026-85447 CVSS 7.5mit | MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable list limits. Attackers can registe… |
| CVE-2026-85446 | CVE-2026-85446 CVSS 7.5mit | MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers… |
| CVE-2026-85445 | CVE-2026-85445 CVSS 7.5mit | MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count declared in mux headers… |
| CVE-2026-85444 | CVE-2026-85444 CVSS 7.5mit | MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using … |
| CVE-2026-85443 | CVE-2026-85443 CVSS 7.5themoos | MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive wi… |
| CVE-2026-85442 | CVE-2026-85442 CVSS 7.5themoos | MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing unauthenticated attackers to trigger unb… |
| CVE-2026-85441 | CVE-2026-85441 CVSS 7.5themoos | MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>. Unauthenticated attackers can send a c… |
| CVE-2026-85440 | CVE-2026-85440 CVSS 9.8themoos | MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write ar… |
| CVE-2026-8544 | CVE-2026-8544 CVSS 8.8 | Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. … |
| CVE-2026-85439 | CVE-2026-85439 CVSS 7.8mit | MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir() function that fails to sanitize sh… |
| CVE-2026-85438 | CVE-2026-85438 CVSS 9.8mit | MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and degree counts from encoded BHV_IPF payloa… |
| CVE-2026-85437 | CVE-2026-85437 CVSS 9.8mit | MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without … |
| CVE-2026-85436 | CVE-2026-85436 CVSS 7.5themoos | MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap me… |
| CVE-2026-85435 | CVE-2026-85435 CVSS 9.1mit | MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-co… |
| CVE-2026-85434 | CVE-2026-85434 CVSS 9.1mit | MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING m… |
| CVE-2026-85433 | CVE-2026-85433 CVSS 9.8themoos | MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners a… |
| CVE-2026-85432 | CVE-2026-85432 CVSS 8.2themoos | MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other cli… |
| CVE-2026-85431 | CVE-2026-85431 CVSS 7.5themoos | MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attack… |
| CVE-2026-85430 | CVE-2026-85430 CVSS 9.1themoos | MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them wi… |
| CVE-2026-85429 | CVE-2026-85429 CVSS 7.5mit | MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can… |
| CVE-2026-85428 | CVE-2026-85428 CVSS 9.8themoos | MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write v… |
| CVE-2026-85427 | CVE-2026-85427 CVSS 8.1themoos | MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs b… |
| CVE-2026-85426 | CVE-2026-85426 CVSS 9.8 | MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharact… |
| CVE-2026-85425 | CVE-2026-85425 CVSS 9.8mit | MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes unsanitized text to a shell command. A… |
| CVE-2026-85424 | CVE-2026-85424 CVSS 9.8themoos | MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database… |
| CVE-2026-85423 | CVE-2026-85423 CVSS 8.8broadcom | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fai… |
| CVE-2026-85422 | CVE-2026-85422 CVSS 7.8broadcom | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secur… |
| CVE-2026-85421 | CVE-2026-85421 CVSS 8.8broadcom | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or acce… |
| CVE-2026-8542 | CVE-2026-8542 CVSS 8.3 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially pe… |
| CVE-2026-85418 | CVE-2026-85418 CVSS 5.4 | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML… |
| CVE-2026-85417 | CVE-2026-85417 | Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific… |
| CVE-2026-85415 | CVE-2026-85415 CVSS 6.8 | The Audio Player Block WordPress plugin before 1.6.3 does not validate the scheme of a user-supplied URL before using it as a link target, allowing users with… |
| CVE-2026-85414 | CVE-2026-85414 CVSS 6.4 | The Gallery : FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute in all versions up to, and… |
| CVE-2026-85410 | CVE-2026-85410 CVSS 8.1 | The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerabl… |
| CVE-2026-85409 | CVE-2026-85409 CVSS 6.3 | A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component … |
| CVE-2026-85408 | CVE-2026-85408 CVSS 4.3 | A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations/<ID>/events o… |
| CVE-2026-85407 | CVE-2026-85407 CVSS 4.3 | A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations/<ID>/ev… |
| CVE-2026-85406 | CVE-2026-85406 CVSS 3.5 | A vulnerability has been found in Eleveo Quality Management 9.7.0. This vulnerability affects unknown code of the component Conversation Review. The manipulati… |
| CVE-2026-85405 | CVE-2026-85405 CVSS 3.5 | A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of … |
| CVE-2026-85403 | CVE-2026-85403 CVSS 7.3 | A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation … |
| CVE-2026-85402 | CVE-2026-85402 CVSS 7.3 | A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The mani… |