112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 14,251–14,300 of 112,666 · page 286 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-79918 | CVE-2026-79918 CVSS 6.3 | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, the ToolExecutor LD_PRELOAD sandbox hooks execve, execvpe, and execveat to pr… |
| CVE-2026-79917 | CVE-2026-79917 CVSS 6.5 | MaxKB is an open-source AI assistant for enterprise. In 2.7.0 through 2.10.4-lts, POST /chat/api/{application_id}/chat/{chat_id}/share_chat verifies that a con… |
| CVE-2026-79916 | CVE-2026-79916 CVSS 9.1 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members can inject control characters into AWS Bedrock access… |
| CVE-2026-79913 | CVE-2026-79913 CVSS 6.5 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side request forgery guard in pkg/request/ssrf.g… |
| CVE-2026-79912 | CVE-2026-79912 CVSS 8.3 | A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Pe… |
| CVE-2026-79911 | CVE-2026-79911 CVSS 10.0 | A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/… |
| CVE-2026-79910 | CVE-2026-79910 CVSS 5.5adobe | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil… |
| CVE-2026-7991 | CVE-2026-7991 CVSS 8.8 | Use after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary code insid… |
| CVE-2026-79909 | CVE-2026-79909 CVSS 7.8adobe | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … |
| CVE-2026-79908 | CVE-2026-79908 CVSS 7.8adobe | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
| CVE-2026-79907 | CVE-2026-79907 CVSS 7.8adobe | Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of thi… |
| CVE-2026-79906 | CVE-2026-79906 CVSS 7.8adobe | Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exp… |
| CVE-2026-79905 | CVE-2026-79905 CVSS 5.4adobe | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious… |
| CVE-2026-79904 | CVE-2026-79904 CVSS 5.0adobe | Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security… |
| CVE-2026-79902 | CVE-2026-79902 CVSS 5.5gimp | A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA… |
| CVE-2026-79901 | CVE-2026-79901 CVSS 9.9 | In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-r… |
| CVE-2026-79900 | CVE-2026-79900 CVSS 6.5 | boks_ksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the dig… |
| CVE-2026-79899 | CVE-2026-79899 CVSS 7.9 | Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting … |
| CVE-2026-79898 | CVE-2026-79898 CVSS 9.1 | Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP… |
| CVE-2026-79896 | CVE-2026-79896 CVSS 7.5 | Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker c… |
| CVE-2026-7988 | CVE-2026-7988 CVSS 8.8 | Type Confusion in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. … |
| CVE-2026-7987 | CVE-2026-7987 CVSS 8.8 | Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. … |
| CVE-2026-7985 | CVE-2026-7985 CVSS 8.3 | Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb… |
| CVE-2026-79845 | CVE-2026-79845 CVSS 7.3 | A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of the file /InventoryManagement/edit.php.… |
| CVE-2026-79843 | CVE-2026-79843 CVSS 6.5 | A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termin… |
| CVE-2026-79842 | CVE-2026-79842 CVSS 9.1 | An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 |
| CVE-2026-79841 | CVE-2026-79841 CVSS 5.8 | A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption. |
| CVE-2026-79840 | CVE-2026-79840 CVSS 7.3 | A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash. |
| CVE-2026-7984 | CVE-2026-7984 CVSS 8.8 | Use after free in ReadingMode in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary c… |
| CVE-2026-79839 | CVE-2026-79839 CVSS 7.3 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash. |
| CVE-2026-79838 | CVE-2026-79838 CVSS 7.3 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash. |
| CVE-2026-79837 | CVE-2026-79837 CVSS 7.3 | A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting i… |
| CVE-2026-79836 | CVE-2026-79836 CVSS 6.4 | A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to pr… |
| CVE-2026-79835 | CVE-2026-79835 CVSS 2.8 | A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server. |
| CVE-2026-79834 | CVE-2026-79834 CVSS 7.4 | A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution. |
| CVE-2026-79833 | CVE-2026-79833 CVSS 7.5 | A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial o… |
| CVE-2026-79832 | CVE-2026-79832 CVSS 7.6 | A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash. |
| CVE-2026-79831 | CVE-2026-79831 CVSS 6.6 | A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution. |
| CVE-2026-79830 | CVE-2026-79830 CVSS 6.6 | A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution. |
| CVE-2026-79829 | CVE-2026-79829 CVSS 8.2 | A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt. |
| CVE-2026-79828 | CVE-2026-79828 CVSS 7.1 | A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow. |
| CVE-2026-79827 | CVE-2026-79827 CVSS 7.1 | A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow. |
| CVE-2026-79826 | CVE-2026-79826 CVSS 7.1 | A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow. |
| CVE-2026-79825 | CVE-2026-79825 CVSS 7.1 | A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow. |
| CVE-2026-79824 | CVE-2026-79824 CVSS 8.0 | A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a… |
| CVE-2026-79823 | CVE-2026-79823 CVSS 4.0 | HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior. |
| CVE-2026-79822 | CVE-2026-79822 CVSS 7.1 | A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow. |
| CVE-2026-79821 | CVE-2026-79821 CVSS 8.2 | A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down. |
| CVE-2026-79820 | CVE-2026-79820 CVSS 9.0 | A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware. |
| CVE-2026-79818 | CVE-2026-79818 CVSS 5.3 | A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. … |