Export limit exceeded: 424909 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424909 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-70641 | 2026-11-12 | N/A | ||
| This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate of CVE-2026-82873. | ||||
| CVE-2026-119398 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-12 | 7.8 High |
| Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-126330 | 2026-11-12 | N/A | ||
| Docker Sandboxes can silently republish a sandbox service after an operator removes its automatically assigned host-port mapping. The daemon removes the active binding but retains the original publication request, allowing a later port change or sandbox restart to publish the service again on a new host port. An attacker able to reach the restored endpoint may regain access to the service. Both TCP and UDP mappings are affected. Exposure is limited to the original bind address, which defaults to loopback. The issue is fixed in version 0.53.0. | ||||
| CVE-2026-121370 | 1 Arista | 1 Eos | 2026-11-12 | 8.6 High |
| On affected platforms running Arista EOS with Precision Time Protocol (PTP) configured, an unauthenticated attacker with network access to a PTP-enabled port can create a denial of service (DoS) condition by sending traffic to the system. | ||||
| CVE-2026-121371 | 1 Arista | 1 Eos | 2026-11-12 | 7.5 High |
| On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem. | ||||
| CVE-2026-121354 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.9 Critical |
| Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121353 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 10 Critical |
| Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121356 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 10 Critical |
| Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121355 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.1 Critical |
| Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction. | ||||
| CVE-2026-121574 | 2 Wordpress-extensions, Wpchill | 2 Passster, Passster | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20. | ||||
| CVE-2026-121028 | 2 Wordpress-extensions, Wpchill | 2 Strong Testimonials, Strong Testimonials | 2026-11-12 | 5.3 Medium |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Chill Strong Testimonials strong-testimonials allows Code Injection.This issue affects Strong Testimonials: from n/a through 3.3.17. | ||||
| CVE-2026-113408 | 2 Git, Git-scm | 2 Git, Git | 2026-11-12 | 3.3 Low |
| Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository | ||||
| CVE-2026-117476 | 2026-11-12 | N/A | ||
| This is rejected. | ||||
| CVE-2026-117474 | 2026-11-12 | N/A | ||
| This is rejected. | ||||
| CVE-2026-117475 | 2026-11-12 | N/A | ||
| This is rejected. | ||||
| CVE-2026-108838 | 1 Ibm | 2 Agentics, Db2 Genius Hub | 2026-11-12 | 3.3 Low |
| IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption. | ||||
| CVE-2026-108910 | 1 Ibm | 2 Agentics, Db2 Genius Hub | 2026-11-12 | 4.3 Medium |
| IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to missing required cryptographic step. | ||||
| CVE-2026-118208 | 1 Microsoft | 1 Exchange Server Se | 2026-11-12 | 7.1 High |
| Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-119998 | 1 Microsoft | 5 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 2 more | 2026-11-12 | 6.5 Medium |
| Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-120001 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-12 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | ||||