Export limit exceeded: 364026 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (364026 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-78167 | 2 Efm, Iptime | 2 Iptime T16000m, T16000m | 2026-08-24 | 10 Critical |
| A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2026-19853 | 1 Cybertutor | 1 New Site Server | 2026-08-24 | 5.3 Medium |
| NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyone on behalf of the school. | ||||
| CVE-2026-19852 | 1 Cybertutor | 1 New Site Server | 2026-08-24 | 6.1 Medium |
| NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting. | ||||
| CVE-2026-77994 | 1 Joomlack | 1 Page Builder Ck Extension For Joomla | 2026-08-24 | N/A |
| Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model. | ||||
| CVE-2026-77993 | 1 Joomlack | 1 Page Builder Ck Extension For Joomla | 2026-08-24 | N/A |
| Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter. | ||||
| CVE-2026-19568 | 1 Autodesk | 1 3ds Max | 2026-08-24 | 7.8 High |
| A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. | ||||
| CVE-2026-7455 | 1 Autodesk | 1 3ds Max | 2026-08-24 | 7.8 High |
| A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. | ||||
| CVE-2026-16783 | 1 Autodesk | 1 3ds Max | 2026-08-24 | 7.8 High |
| A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. | ||||
| CVE-2026-16782 | 1 Autodesk | 1 3ds Max | 2026-08-24 | 5.3 Medium |
| A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. | ||||
| CVE-2026-16922 | 1 Ibm | 3 Aix, Powervm Vios, Vios | 2026-08-24 | 7 High |
| IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use (TOCTOU) race condition. | ||||
| CVE-2026-16781 | 1 Autodesk | 1 3ds Max | 2026-08-24 | 5.5 Medium |
| A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service. | ||||
| CVE-2026-16923 | 1 Ibm | 3 Aix, Powervm Vios, Vios | 2026-08-24 | 7 High |
| IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management. | ||||
| CVE-2026-16924 | 1 Ibm | 3 Aix, Powervm Vios, Vios | 2026-08-24 | 7.5 High |
| IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper calculation of a memory offset during IPsec decapsulation. | ||||
| CVE-2026-16925 | 1 Ibm | 3 Aix, Powervm Vios, Vios | 2026-08-24 | 7.1 High |
| IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization. | ||||
| CVE-2025-26238 | 1 Dlink | 1 Di-8100g | 2026-08-24 | N/A |
| In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code. | ||||
| CVE-2025-36940 | 1 Google | 1 Android | 2026-08-24 | 8.8 High |
| Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP) | ||||
| CVE-2026-66584 | 2 Code4recovery, Wordpress | 2 12 Step Meeting List, Wordpress | 2026-08-24 | 7.1 High |
| Unauthenticated Cross Site Scripting (XSS) in 12 Step Meeting List <= 3.19.16 versions. | ||||
| CVE-2026-78258 | 2 Magepeople, Wordpress | 2 Booking & Rental Manager, Wordpress | 2026-08-24 | 5.3 Medium |
| Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions. | ||||
| CVE-2026-78270 | 2 Wordpress, Wpmanageninja | 2 Wordpress, Fluentcrm | 2026-08-24 | 7.6 High |
| Author SQL Injection in FluentCRM Pro <= 3.1.12 versions. | ||||
| CVE-2026-78272 | 2 Wordpress, Wpmanageninja | 2 Wordpress, Fluent Support | 2026-08-24 | 5.4 Medium |
| Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions. | ||||