Export limit exceeded: 420554 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 420554 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (420554 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-27316 | 1 Fortinet | 4 Fortisandbox, Fortisandbox Cloud, Fortisandbox Paas and 1 more | 2026-11-06 | 2.5 Low |
| A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versions, FortiSandbox PaaS 22.2 all versions, FortiSandbox PaaS 22.1 all versions, FortiSandbox PaaS 21.4 all versions, FortiSandbox PaaS 21.3 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection. | ||||
| CVE-2026-39810 | 1 Fortinet | 1 Forticlientems | 2026-11-06 | 5.2 Medium |
| A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1 may allow attacker to information disclosure via decrypting database dump. | ||||
| CVE-2026-25088 | 1 Fortinet | 1 Fortindr | 2026-11-06 | 4.9 Medium |
| An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. | ||||
| CVE-2026-84391 | 1 Fortinet | 1 Fortianalyzer | 2026-11-06 | 5.9 Medium |
| A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via SNMP GETBULK requests. | ||||
| CVE-2026-84388 | 1 Fortinet | 1 Fortipam Chrome Extension | 2026-11-06 | 9.1 Critical |
| A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions may allow attacker to information disclosure via remote unauthenticated attack | ||||
| CVE-2026-123839 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 4.7 Medium |
| In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model | ||||
| CVE-2026-123845 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 3.3 Low |
| In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects | ||||
| CVE-2026-123962 | 1 Debian | 1 Freedombox | 2026-11-06 | 8.4 High |
| In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a symlink. NOTE: FreedomBox is a Debian Pure Blend, which means that it distributes its software through Debian repositories. | ||||
| CVE-2026-123840 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 4.7 Medium |
| In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs | ||||
| CVE-2026-123843 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 3.3 Low |
| In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration | ||||
| CVE-2026-123848 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 7.4 High |
| In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates | ||||
| CVE-2026-123849 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 7 High |
| In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers | ||||
| CVE-2026-123850 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.5 Low |
| In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives | ||||
| CVE-2026-3832 | 2 Gnu, Redhat | 11 Gnutls, Cert Manager, Discovery and 8 more | 2026-11-06 | 3.7 Low |
| A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust. | ||||
| CVE-2026-112554 | 1 Apple | 4 Ios And Ipados, Ipados, Iphone Os and 1 more | 2026-11-06 | 7.5 High |
| An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory. | ||||
| CVE-2023-38375 | 1 Ibm | 1 Cloud Pak System | 2026-11-06 | 6.1 Medium |
| IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | ||||
| CVE-2026-56717 | 2026-11-06 | N/A | ||
| This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||||
| CVE-2026-26084 | 1 Fortinet | 5 Fortisandbox, Fortisandbox Cloud, Fortisandbox Paas and 2 more | 2026-11-06 | 8.9 High |
| A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests. | ||||
| CVE-2026-28621 | 1 Google | 1 Android | 2026-11-06 | 4.0 Medium |
| In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-123855 | 1 Jetbrains | 1 Toolbox | 2026-11-06 | 7.5 High |
| In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs | ||||