Export limit exceeded: 412929 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 412929 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (412929 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-98150 | 1 Linux | 1 Linux Kernel | 2026-10-21 | 7 High |
| In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs BPF_F_CPU stores the target CPU ID in the upper 32 bits of the map operation flags. bpf_map_check_op_flags() currently compares that ID with num_possible_cpus(), which is the number of possible CPUs rather than a bound on CPU IDs. On an arm64 QEMU guest with a CPU device-tree hole, the possible CPU mask was 0,2-3. A userspace program using raw bpf() syscalls creates a BPF_MAP_TYPE_PERCPU_ARRAY and performs update and lookup operations for each CPU by setting BPF_F_CPU and the CPU ID in the flags. With the old check, CPU 1 is incorrectly accepted while valid CPU 3 is rejected with -ERANGE. The CPU 1 update then reaches the per-CPU map access path and triggers: Unable to handle kernel paging request at virtual address ... pc : __pi_memcpy_generic+0x5c/0x22c lr : bpf_percpu_array_update+0x2dc/0x2e8 Call trace: __pi_memcpy_generic bpf_map_update_value map_update_elem __sys_bpf Check the CPU ID against nr_cpu_ids and cpu_possible() instead. This rejects CPU IDs outside the valid range and CPUs absent from the possible mask, while allowing valid sparse CPU IDs. | ||||
| CVE-2026-110214 | 1 Xiaonuobase | 1 Snowy | 2026-10-21 | 3.7 Low |
| Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE_DOWNLOAD_SIGN_SECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to download stored files such as avatars, editor images and attachments. | ||||
| CVE-2026-110220 | 1 Kubeflow | 1 Model Registry | 2026-10-21 | 7.1 High |
| Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server, capture the bearer token, and modify other tenants' InferenceServices cluster-wide. | ||||
| CVE-2026-110222 | 1 Razorpay | 1 Ifsc | 2026-10-21 | 5.3 Medium |
| Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC code to IFSC.find or IFSC#get. Attackers can submit network-path references or absolute URIs that URI.join resolves as a new host, sending GET requests to internal or attacker-chosen hosts and returning parsed response fields. | ||||
| CVE-2026-110230 | 1 Sergix44 | 1 Xbackbone | 2026-10-21 | 5.4 Medium |
| XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other users' upload share codes via the POST /upload/{id}/vanity route. Attackers can supply sequential upload ids to MediaController::createVanity() to break existing share links and hijack the freed codes with their own uploads. | ||||
| CVE-2026-110232 | 1 Fossify | 1 Fossify File Manager | 2026-10-21 | 3.3 Low |
| Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../<name>_x/file to create or overwrite files in sibling folders when a user extracts the archive. | ||||
| CVE-2026-110233 | 1 Nspc911 | 1 Rovr | 2026-10-21 | 7.8 High |
| Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opened through open_file. | ||||
| CVE-2026-97788 | 1 Microsoft | 30 .net, .net Framework, Windows 10 1607 and 27 more | 2026-10-21 | 7.5 High |
| Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-110639 | 1 Mborne | 1 Extract | 2026-10-21 | 9.8 Critical |
| @mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options. Attackers controlling these values passed to extract() can inject commands into unquoted shelljs exec() strings in the unzip, 7z, tar-bz2 and gz extractors, running them with Node.js process privileges. | ||||
| CVE-2026-108335 | 1 Hitachi | 1 Vantara Remote Ops Agent | 2026-10-21 | N/A |
| When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting on the attempts to enter the reset code, leading to the possibility of a brute force solution to the password reset challenge. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability. | ||||
| CVE-2026-108336 | 1 Hitachi | 1 Vantara Remote Ops Agent | 2026-10-21 | N/A |
| When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that are used to validate that the user is logged in. When the default SSL certificate is used, an attacker could have the capability to sign JWT access tokens and bypass login. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability. | ||||
| CVE-2026-108337 | 1 Hitachi | 1 Vantara Remote Ops Agent | 2026-10-21 | N/A |
| An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output of an API and could be used to reset the password of any account. The API is limited to use by administrator accounts only. An attacker who already has administrative access to the application could compromise the credentials of other accounts on the application. Device credentials and customer data cannot be accessed with this vulnerability. | ||||
| CVE-2026-102298 | 1 Tp-link | 1 Omada Software Controller | 2026-10-21 | N/A |
| In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receive responses that distinguish nonexistent users, invalid passwords, and successful authentication. Successful exploitation may allow user enumeration, credential verification, and unauthorized access to MSP resources or compromise of targeted accounts. | ||||
| CVE-2026-73799 | 1 Hpe | 1 Nonstop Snmp Trap Multiplexer | 2026-10-21 | 7.5 High |
| A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption | ||||
| CVE-2026-76656 | 1 Hpe | 1 Nonstop Tcp/ip Utilities | 2026-10-21 | 5.3 Medium |
| A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions. | ||||
| CVE-2026-76659 | 1 Hpe | 1 Nonstop Tcp/ip Utilities | 2026-10-21 | 7.5 High |
| A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service. | ||||
| CVE-2026-79822 | 1 Hpe | 1 Nonstop Tns/x Native Inspect | 2026-10-21 | 7.1 High |
| A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow. | ||||
| CVE-2026-105271 | 1 Geo Corporation | 2 "ゲオアプリ" For Android, "ゲオアプリ" For Ios | 2026-10-21 | N/A |
| "ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application. | ||||
| CVE-2026-75559 | 1 Ministry Of Land, Infrastructure, Transport And Tourism | 2 Vehicle Inspection Certificate Viewer (for Android), Vehicle Inspection Certificate Viewer (for Ios) | 2026-10-21 | N/A |
| The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key. | ||||
| CVE-2026-101290 | 1 Sick Ag | 1 Sick Safetyscanners Base Cpp Driver | 2026-10-21 | 7.5 High |
| A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service condition. | ||||