Export limit exceeded: 33687 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (33687 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-54387 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; never assigned. | ||||
| CVE-2023-54386 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; never assigned. | ||||
| CVE-2023-54385 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; never assigned. | ||||
| CVE-2023-54384 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; never assigned. | ||||
| CVE-2023-54383 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; never assigned. | ||||
| CVE-2023-54382 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | ||||
| CVE-2023-54381 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | ||||
| CVE-2023-54380 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | ||||
| CVE-2023-54379 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | ||||
| CVE-2023-54378 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | ||||
| CVE-2023-54377 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | ||||
| CVE-2023-54376 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | ||||
| CVE-2023-54375 | 2026-08-05 | N/A | ||
| Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE. | ||||
| CVE-2026-67977 | 2026-08-05 | 7.5 High | ||
| An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) via a crafted input. | ||||
| CVE-2026-70427 | 1 Jenkins Project | 1 Jenkins | 2026-08-05 | 4.3 Medium |
| Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of `.tar` and `.tar.gz` archives, allowing attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary locations on the file system, restricted only by file system access permissions of the user running Jenkins. | ||||
| CVE-2026-70431 | 1 Jenkins Project | 1 Jenkins Multijob Plugin | 2026-08-05 | 8.8 High |
| Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM. | ||||
| CVE-2026-70439 | 2026-08-05 | 6.5 Medium | ||
| Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality. | ||||
| CVE-2026-70443 | 2026-08-05 | 4.3 Medium | ||
| Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to have Jenkins send credentials they are not entitled to use to the administrator-configured Horreum URL. | ||||
| CVE-2026-70444 | 2026-08-05 | 4.3 Medium | ||
| A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. | ||||
| CVE-2025-70962 | 2026-08-05 | 7.5 High | ||
| Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage. | ||||