Export limit exceeded: 410646 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (410646 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-118504 | 1 Gitea | 1 Gitea | 2026-11-06 | 6.5 Medium |
| The web interface blocks issue and pull request changes on archived repositories, but several issue routes of the REST API did not check whether the repository is archived. A user allowed to change issues of an archived repository could use the API to edit, close or delete issues, change labels and deadlines, add or delete tracked time and stopwatches, add reactions, change issue blocks, and pin issues, altering data that archiving is meant to freeze. Gitea 28.2.0 added the check to the issue edit, delete and label routes; Gitea 28.3.0 applies it to all modifying repository API requests. | ||||
| CVE-2026-123833 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 3.6 Low |
| In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects | ||||
| CVE-2026-123836 | 1 Jetbrains | 1 Datalore | 2026-11-06 | 8.8 High |
| In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup | ||||
| CVE-2026-123837 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 7.8 High |
| In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL | ||||
| CVE-2026-123838 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 7.8 High |
| In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file | ||||
| CVE-2026-123841 | 2026-11-06 | 7.8 High | ||
| In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive | ||||
| CVE-2026-123842 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 7.1 High |
| In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives | ||||
| CVE-2026-123490 | 1 Craftcms | 2 Cms, Craft Cms | 2026-11-06 | 8.8 High |
| Craft CMS from 5.8.17 before 5.11.2 contains a privilege escalation vulnerability because getOwners() applies caller criteria without cleansing the query configuration. Authenticated control panel users can invoke attacker-selected static PHP callables via crafted criteria to promote every account to administrator. | ||||
| CVE-2026-123831 | 1 Jetbrains | 1 Clion | 2026-11-06 | 9.6 Critical |
| In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings | ||||
| CVE-2026-92899 | 1 Apache | 1 Wss4j | 2026-11-06 | 4.8 Medium |
| Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured token cannot be reused. It stored the Nonce as raw base64 text, but authentication decodes that text and uses the bytes.The same bytes can be written as base64 in several ways. An attacker who captured an authenticated request could re-send it with a space added to the Nonce: the password digest still verified, but the token no longer matched the remembered one, so the replay was accepted. Since a UsernameToken does not cover the message body, the captured token could then be reused on requests of the attacker's choosing until it expired. Affects deployments with a nonce replay cache configured, as Apache CXF has by default, and only tokens using a password digest. The cache is now keyed on the decoded Nonce. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue. | ||||
| CVE-2025-64798 | 2026-11-06 | N/A | ||
| Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-CVE remediation | ||||
| CVE-2025-46896 | 2026-11-06 | N/A | ||
| Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-CVE remediation | ||||
| CVE-2024-36240 | 2026-11-06 | N/A | ||
| Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-CVE remediation | ||||
| CVE-2026-2443 | 3 Gnome, Red Hat, Redhat | 4 Libsoup, Enterprise Linux, Enterprise Linux and 1 more | 2026-11-06 | 5.3 Medium |
| A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component. | ||||
| CVE-2026-19411 | 1 Redhat | 2 Enterprise Linux, Rhel Els | 2026-11-06 | 3.9 Low |
| A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader. | ||||
| CVE-2026-18839 | 2 Popt-devel, Redhat | 8 Popt-static, Enterprise Linux, Hardened Images and 5 more | 2026-11-06 | 2.2 Low |
| An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application. | ||||
| CVE-2026-18743 | 2 Redhat, Rpm-software-management | 8 Enterprise Linux, Hardened Images, Hummingbird and 5 more | 2026-11-06 | 2.5 Low |
| A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service). | ||||
| CVE-2026-18739 | 2 Popt-devel, Redhat | 6 Popt-static, Enterprise Linux, Hummingbird and 3 more | 2026-11-06 | 2.5 Low |
| A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacker to execute arbitrary code if the host application then unsafely processes the altered data. | ||||
| CVE-2026-18103 | 2 Dhcp-server, Redhat | 3 Dhcp-server, Enterprise Linux, Rhel Els | 2026-11-06 | 4.9 Medium |
| A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could send a specially crafted lease creation request. This request, containing an overly long InfiniBand MAC address, triggers a buffer overflow in the `print_hw_addr()` function. Successful exploitation leads to a persistent denial of service (DoS), causing the `dhcpd` service to crash and preventing it from restarting without manual intervention. | ||||
| CVE-2026-18090 | 1 Redhat | 2 Enterprise Linux, Rhel Els | 2026-11-06 | 6.1 Medium |
| A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during decompression. This can lead to a denial of service, where the application crashes, or to information disclosure, potentially revealing sensitive data from adjacent memory. | ||||