Export limit exceeded: 26355 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (26355 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-24284 | 1 Simon Tatham | 1 Portable Puzzle Collection | 2026-09-17 | 2.9 Low |
| Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function. | ||||
| CVE-2023-24285 | 1 Simon Tatham | 1 Portable Puzzle Collection | 2026-09-17 | 2.9 Low |
| Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed. | ||||
| CVE-2023-24286 | 1 Simon Tatham | 1 Portable Puzzle Collection | 2026-09-17 | 2.9 Low |
| Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter. | ||||
| CVE-2023-24287 | 1 Simon Tatham | 1 Portable Puzzle Collection | 2026-09-17 | 2.9 Low |
| Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command. | ||||
| CVE-2023-24291 | 1 Simon Tatham | 1 Portable Puzzle Collection | 2026-09-17 | 2.9 Low |
| Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter. | ||||
| CVE-2026-16726 | 1 Panasonic | 4 Panaterm For Multi, Panaterm V6, Panaterm V7 and 1 more | 2026-09-17 | N/A |
| Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows attackers to stop Windows. | ||||
| CVE-2026-82770 | 1 Contec | 4 Rp-wah-sr1, Rp-wah-sr12, Rp-wah-sr2 and 1 more | 2026-09-17 | 8.8 High |
| Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed. | ||||
| CVE-2026-82785 | 1 Contec | 1 Remote I/o Coupler Unit (server Type) Cpsn-mcb271-* | 2026-09-17 | 4.3 Medium |
| Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition. | ||||
| CVE-2026-90891 | 1 Asrock | 2 Asrock Polychrome Sync/rgb For Mb, Asrock Polychrome Sync/rgb For Vga | 2026-09-17 | 5.5 Medium |
| ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot. | ||||
| CVE-2025-20359 | 1 Cisco | 4 Cyber Vision, Secure Firewall Threat Defense, Snort and 1 more | 2026-09-17 | 6.5 Medium |
| Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the disclosure of possible sensitive data or cause the Snort 3 Detection Engine to crash. This vulnerability is due to an error in the logic of buffer handling when the MIME fields of the HTTP header are parsed. This can result in a buffer under-read. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to induce one of two possible outcomes: the unexpected restarting of the Snort 3 Detection Engine, which could cause a denial of service (DoS) condition, or information disclosure of sensitive information in the Snort 3 data stream. Due to the under-read condition, it is possible that sensitive information that is not valid connection data could be returned. | ||||
| CVE-2025-20327 | 1 Cisco | 1 Ios | 2026-09-17 | 7.7 High |
| A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. | ||||
| CVE-2026-72999 | 1 Microsoft | 21 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 18 more | 2026-09-17 | 6.8 Medium |
| Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-69609 | 1 Microsoft | 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more | 2026-09-17 | 5.5 Medium |
| Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-79241 | 1 Google | 2 Android, Chrome | 2026-09-17 | 6.5 Medium |
| Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-70586 | 1 Microsoft | 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more | 2026-09-17 | 8.8 High |
| Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-79020 | 1 Google | 1 Chrome | 2026-09-17 | 8.1 High |
| Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium) | ||||
| CVE-2026-91738 | 1 Google | 1 Chrome | 2026-09-17 | 9.6 Critical |
| Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-76924 | 1 Wireshark | 1 Wireshark | 2026-09-17 | 5.5 Medium |
| Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | ||||
| CVE-2026-76917 | 1 Wireshark | 1 Wireshark | 2026-09-17 | 5.5 Medium |
| Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | ||||
| CVE-2026-76889 | 1 Wireshark | 1 Wireshark | 2026-09-17 | 4.7 Medium |
| UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | ||||