Export limit exceeded: 370594 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (370594 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-45219 2026-09-08 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-70468 1 Fortinet 3 Fortimanager, Fortimanager Cloud, Fortimanagercloud 2026-09-08 7.3 High
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>
CVE-2026-7809 2026-09-08 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-71407 1 Fortinet 3 Fortios, Fortipam, Fortiproxy 2026-09-08 5.1 Medium
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
CVE-2026-71408 1 Fortinet 1 Fortios 2026-09-08 5 Medium
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>
CVE-2026-78511 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78512 1 Microsoft 11 365 Apps, Microsoft 365, Office 2016 and 8 more 2026-09-08 8.8 High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78514 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 8.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78517 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78521 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78522 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-09-08 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78526 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-08 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80079 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-09-08 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80080 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 8.8 High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80085 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80088 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-08 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-19683 2 Tp-link, Tp-link Systems Inc 55 Dr3150, Dr3150 Firmware, Dr3150 V1 and 52 more 2026-09-08 7.4 High
A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and the DDNS service may obtain sensitive authentication information or interfere with DDNS update operations. Exploitation requires DDNS to be configured, communication with an external DDNS service, and attacker visibility or control of the relevant network path.  Successful exploitation may result in disclosure of DDNS account credentials, unauthorized access to DDNS management functionality, or modification of DNS records associated with the affected deployment.
CVE-2026-78742 2026-09-08 N/A
Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.
CVE-2026-80090 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-08 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69316 1 Microsoft 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more 2026-09-08 4.7 Medium
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.