Export limit exceeded: 415192 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (415192 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-114559 | 1 Originlab | 1 Origin Viewer | 2026-11-12 | N/A |
| OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30431. | ||||
| CVE-2026-114558 | 1 Originlab | 1 Origin Viewer | 2026-11-12 | N/A |
| OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OPJU files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30738. | ||||
| CVE-2026-114556 | 1 Mailenable | 1 Mailenable | 2026-11-12 | N/A |
| MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the Save method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-29161. | ||||
| CVE-2026-110072 | 1 Wordpress-extensions | 1 Photo Gallery By 10web | 2026-11-12 | 6.8 Medium |
| The Photo Gallery by 10Web WordPress plugin before 1.8.49 does not escape a shortcode attribute that sets a gallery watermark image before rendering it into an HTML image attribute, and decodes percent-encoded characters in the value, allowing users with Contributor-level access and above to perform Stored Cross-Site Scripting that executes in the browser of any user, including an administrator, who views the published gallery. | ||||
| CVE-2026-124627 | 2026-11-12 | N/A | ||
| In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could result in that user receiving the LDAP-mapped team memberships and associated permissions of another user. This issue only affects instances with LDAP authentication enabled and LDAP groups mapped to Octopus teams. | ||||
| CVE-2026-116835 | 2026-11-12 | N/A | ||
| In affected versions of Octopus Server, insufficient validation of custom claims on OIDC accounts allowed a user with permission to edit accounts to cause Octopus Server to issue signed OIDC tokens that impersonate a different project. This could grant access to external systems, such as cloud providers or other Octopus instances, that trust that project's identity. | ||||
| CVE-2026-123710 | 1 Redhat | 1 Quay | 2026-11-12 | 9.8 Critical |
| A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key are accepted for any repository, allowing read and write access to private images and replacement of repository tags. | ||||
| CVE-2026-110697 | 1 Redhat | 2 Openshift Update Service, Quay | 2026-11-12 | 9.9 Critical |
| A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations. | ||||
| CVE-2026-122095 | 2026-11-12 | 7.6 High | ||
| AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon upload function. An authenticated user with ordinary application privileges can upload an SVG file containing embedded JavaScript, which is served from the application origin. Normal menu rendering uses an HTML <img> element and does not execute the SVG script; exploitation requires a victim to load the uploaded SVG as a document (by directly navigating to its URL, or via <object>/<iframe>), in which case the script executes under the application origin. | ||||
| CVE-2026-121528 | 1 Fortinet | 1 Fortios | 2026-11-12 | 7.7 High |
| A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website. | ||||
| CVE-2026-106140 | 2 Progress, Progress Software | 2 Telerik Reporting, Telerik Reporting | 2026-11-12 | 7.3 High |
| In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editing operations. | ||||
| CVE-2026-114369 | 1 Qt | 3 Qt, Qt Framework, Qtwebsockets | 2026-11-12 | N/A |
| Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets module | ||||
| CVE-2026-111760 | 1 Git | 1 Git | 2026-11-12 | 8.8 High |
| A flaw was found in Git. Unsafe handling of submodule-related repository metadata during recursive clone operations can lead to arbitrary code execution. A remote attacker could exploit this vulnerability by supplying a crafted repository that triggers unauthorized command execution on the host system when cloned recursively. | ||||
| CVE-2026-114466 | 1 Git | 1 Git | 2026-11-12 | 4.4 Medium |
| Arbitrary data can be read or written through git-fast-import(1) and git-fast-export(1) features not marked unsafe | ||||
| CVE-2026-114467 | 2 Git, Git-scm | 2 Git, Git | 2026-11-12 | 3.3 Low |
| Out-of-bounds write possible in Git when git-merge(1) used on tag with more than two GPG signatures | ||||
| CVE-2026-114469 | 1 Git | 1 Git | 2026-11-12 | 4.4 Medium |
| Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size | ||||
| CVE-2026-127058 | 2026-11-12 | 4.9 Medium | ||
| WonderCMS before 3.7.0 contains an unverified password change vulnerability in the saveAction functionality that allows an authenticated attacker to change the administrator password without re-authentication. Attackers can exploit this missing re-verification check during password changes to bypass re-authentication controls and maintain or escalate unauthorized access to the administrative account. | ||||
| CVE-2026-97845 | 1 Qt | 3 Qt, Qt5compat, Qtbase | 2026-11-12 | N/A |
| An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5). | ||||
| CVE-2026-126256 | 1 Fortinet | 1 Fortios | 2026-11-12 | 7.4 High |
| A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow a remote privileged attacker to execute arbitrary code or command via crafted paquets. | ||||
| CVE-2026-121530 | 1 Fortinet | 1 Fortios | 2026-11-12 | 5.9 Medium |
| A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password | ||||