Export limit exceeded: 419507 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (419507 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-123010 | 2026-11-05 | 7.2 High | ||
| @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There may be other impacts in a misconfiguration where oktaUrl isn't set. | ||||
| CVE-2026-83596 | 1 Redhat | 7 Enterprise Linux, Rhel Aus, Rhel E4s and 4 more | 2026-11-05 | 8.8 High |
| A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. | ||||
| CVE-2026-78376 | 1 Redhat | 7 Enterprise Linux, Rhel Aus, Rhel E4s and 4 more | 2026-11-05 | 8.8 High |
| A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption. | ||||
| CVE-2026-93903 | 1 Litespeedtech | 1 Litespeed Web Server | 2026-11-05 | N/A |
| LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case" of %252e%252e double decoding, letting a low-privileged tenant execute code in the context of a different account. | ||||
| CVE-2026-116617 | 2026-11-05 | 8.1 High | ||
| The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because `stm_save_user_extra_fields()`, hooked to `personal_options_update`, writes the attacker-controlled `stm_dealer_logo_path` parameter directly to user meta without an ownership check binding the submitted path to the submitting user — unlike the `stm_payment_status` and `stm_lost_password_hash` fields, this field is not gated by a `manage_options` or `edit_users` capability check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete image files belonging to other users under `wp-content/uploads` — including other users' avatars, dealer logos, and uploaded media — by storing a crafted path via their own profile and then triggering `unlink()` through the become-dealer form on their author page. Note that the two path guards (`stm_mvl_is_path_within_uploads` and `stm_mvl_is_allowed_image_file`) do restrict the attack surface to files with an image extension that resolve within the uploads basedir; files outside that directory, such as `wp-config.php` or plugin PHP files, cannot be reached. | ||||
| CVE-2026-48176 | 2026-11-05 | N/A | ||
| A memory corruption vulnerability caused by improper validation of messages | ||||
| CVE-2026-33969 | 2026-11-05 | N/A | ||
| In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. | ||||
| CVE-2026-69006 | 2026-11-05 | N/A | ||
| Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. | ||||
| CVE-2026-69005 | 2026-11-05 | N/A | ||
| Integer overflow in NPU driver parameter processing due to insufficient bounds checking. | ||||
| CVE-2025-66366 | 2026-11-05 | N/A | ||
| Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash | ||||
| CVE-2026-68991 | 2026-11-05 | N/A | ||
| In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition. | ||||
| CVE-2026-68990 | 2026-11-05 | N/A | ||
| In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation. | ||||
| CVE-2026-68993 | 2026-11-05 | N/A | ||
| A double free vulnerability in NPU driver due to improper pointer management (940) | ||||
| CVE-2026-48178 | 2026-11-05 | N/A | ||
| Out of bound access in PPC due to race condition in global variable access | ||||
| CVE-2026-48174 | 2026-11-05 | N/A | ||
| In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | ||||
| CVE-2026-48173 | 2026-11-05 | N/A | ||
| In the NAS message handler, improper validation of the length field in NAS message causes memory corruption | ||||
| CVE-2025-66365 | 2026-11-05 | N/A | ||
| Incorrect handling of SIP packets leads to baseband crashes | ||||
| CVE-2026-122992 | 2026-11-05 | N/A | ||
| In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field. | ||||
| CVE-2026-35495 | 2026-11-05 | N/A | ||
| In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability | ||||
| CVE-2025-66368 | 2026-11-05 | N/A | ||
| Incorrect handling of SDP payload leads to a Denial of Service | ||||