Export limit exceeded: 413447 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (413447 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-79846 | 2026-10-22 | 10 Critical | ||
| No description provided | ||||
| CVE-2026-55200 | 1 Libssh2 | 1 Libssh2 | 2026-10-22 | 8.1 High |
| libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution. | ||||
| CVE-2026-15634 | 1 Ibm | 2 Websphere Application Server, Websphere Application Server Liberty | 2026-10-22 | 6.5 Medium |
| IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks. | ||||
| CVE-2026-15412 | 1 Ibm | 2 Websphere Application Server, Websphere Application Server Liberty | 2026-10-22 | 6.5 Medium |
| IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. | ||||
| CVE-2026-15396 | 1 Ibm | 2 Websphere Application Server, Websphere Application Server Liberty | 2026-10-22 | 6.5 Medium |
| IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks. | ||||
| CVE-2026-13599 | 1 Abb | 1 Ability Edgenius | 2026-10-22 | 7.8 High |
| Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0. | ||||
| CVE-2026-11722 | 1 Ibm | 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty | 2026-10-22 | 4.8 Medium |
| IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability. | ||||
| CVE-2026-11549 | 1 Ibm | 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty | 2026-10-22 | 6.5 Medium |
| IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a virtual host bypass vulnerability. | ||||
| CVE-2026-11548 | 1 Ibm | 3 Cics Tx Advanced, Websphere Application Server, Websphere Application Server Liberty | 2026-10-22 | 4.8 Medium |
| IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HTTP request smuggling vulnerability. | ||||
| CVE-2026-115502 | 2026-10-22 | N/A | ||
| A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all "links without login" to DataApps. | ||||
| CVE-2026-115496 | 2026-10-22 | N/A | ||
| Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible. | ||||
| CVE-2026-115494 | 2026-10-22 | N/A | ||
| A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing. As a workaround, an API gateway for firewall in front of KNIME Business Hub could remove the X-Forwaded-For header from all incoming requests. | ||||
| CVE-2026-115414 | 1 Aws | 1 Aws-sam-cli | 2026-10-22 | 7.8 High |
| OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To remediate this issue, users should upgrade to version 1.166.2 or later. | ||||
| CVE-2026-115397 | 1 Nsa | 1 Ghidra | 2026-10-22 | 5.5 Medium |
| Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesystem inodes, causing project writes and other processes to fail. | ||||
| CVE-2026-115396 | 1 Nsa | 1 Ghidra | 2026-10-22 | 5.5 Medium |
| Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesystem, causing later writes to fail. | ||||
| CVE-2026-115395 | 1 Nsa | 1 Ghidra | 2026-10-22 | 5.5 Medium |
| Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space to deny service to the host. | ||||
| CVE-2026-115394 | 1 Nsa | 1 Ghidra | 2026-10-22 | 5.5 Medium |
| Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length field. Attackers can persuade users to import a crafted GZF packed database file, triggering an OutOfMemoryError in PackedDatabase.open() that aborts the import and denies service. | ||||
| CVE-2026-115393 | 1 Bytecodealliance | 1 Wasmtime | 2026-10-22 | 3.8 Low |
| Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to validate that objects belong to the Store's Engine. Embedders mixing objects between Engines via Instance::new, StructRefPre::new, or Tag::new can trigger trampoline signature mismatches causing out-of-bounds stack writes, GC heap corruption, or panics. | ||||
| CVE-2026-115392 | 1 Bytecodealliance | 1 Wasmtime | 2026-10-22 | 7.9 High |
| Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mishandles symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any sandboxed directory can read and write any host-accessible file, and read-only guests may read host files via preexisting symlinks. | ||||
| CVE-2026-115391 | 1 Bytecodealliance | 1 Wasmtime | 2026-10-22 | 5.8 Medium |
| Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length writes on the host without limit. Malicious guests can offer large buffers to WASIp3 file or HTTP write streams, causing the host to copy and buffer all bytes, bounded only by guest linear memory, exhausting host memory. | ||||