Export limit exceeded: 415138 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (415138 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-53564 | 1 Citrix | 1 Uniconos | 2026-10-26 | N/A |
| Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. | ||||
| CVE-2026-86573 | 1 Hitachi | 2 Hitachi Disk Array Driver For Aix, Hitachi Disk Array Driver For Virtual I/o Server | 2026-10-26 | 5.1 Medium |
| Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A. | ||||
| CVE-2026-106931 | 3 E-guardian, Eg Secure Solutions, Freebsd | 7 Siteguard, Siteguard Server Edition For Apache Httpd, Siteguard Server Edition For Apache Httpd On Freebsd and 4 more | 2026-10-26 | N/A |
| SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. | ||||
| CVE-2026-89310 | 1 Jtl-software | 1 Jtl-wms | 2026-10-26 | 9.9 Critical |
| A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account. | ||||
| CVE-2026-103671 | 1 Ec-cube | 1 Amazonpay V2 Plugin | 2026-10-26 | N/A |
| External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained. | ||||
| CVE-2026-73792 | 1 Hpe | 1 Nonstop Java Jtoolkit | 2026-10-26 | 3.8 Low |
| A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow. | ||||
| CVE-2026-73795 | 1 Hpe | 1 Nonstop Tmf Auditread2 | 2026-10-26 | 6.4 Medium |
| A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service. | ||||
| CVE-2026-107424 | 2 M A Vinoth Kumar, Wordpress-extensions | 2 Frontend Dashboard, Frontend Dashboard | 2026-10-26 | 9.8 Critical |
| Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7. | ||||
| CVE-2026-16741 | 1 Tr7 Cyber defense Inc. | 1 Tr7 Asp | 2026-10-26 | 9.8 Critical |
| Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331. | ||||
| CVE-2026-16740 | 1 Tr7 Cyber defense Inc. | 1 Tr7 Asp | 2026-10-26 | 9.8 Critical |
| Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331. | ||||
| CVE-2026-110259 | 1 Ow2 | 1 Asm | 2026-10-26 | 5.5 Medium |
| OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service through crafted class files. Attackers can supply a class with a large method containing many long forward jumps, triggering unbounded toByteArray() recursion and a StackOverflowError during transformation. | ||||
| CVE-2026-110261 | 1 Ow2 | 1 Asm | 2026-10-26 | 5.5 Medium |
| OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames() fix point algorithm converge slowly, tying up transforming threads for unbounded time. | ||||
| CVE-2026-110262 | 1 Ow2 | 1 Asm | 2026-10-26 | 3.3 Low |
| OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class files. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in forwardJumpStackFrames and allocation of hundreds of megabytes, leading to denial of service. | ||||
| CVE-2026-110263 | 1 Ow2 | 1 Asm | 2026-10-26 | 5.5 Medium |
| OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type arguments to trigger a StackOverflowError during class transformation, causing denial of service. | ||||
| CVE-2026-110270 | 1 Ow2 | 1 Asm | 2026-10-26 | 5.5 Medium |
| OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory or work limits. Attackers can supply a crafted class file with nested subroutines to force O(2^n) memory allocation, causing an OutOfMemoryError that crashes the JVM. | ||||
| CVE-2026-110594 | 1 Micropyramid | 2 Bottlecrm, Django Crm | 2026-10-26 | 4.9 Medium |
| BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers via unbounded routing rule regex patterns. Attackers can create a routing rule with a catastrophically backtracking pattern evaluated by _match_condition() during case saves, exhausting workers shared across all tenants. | ||||
| CVE-2026-110603 | 1 Rapidlasso | 1 Laszip | 2026-10-26 | 6.3 Medium |
| LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C API, crashes the process and corrupts the heap. | ||||
| CVE-2026-110607 | 1 Bizspring | 2 Bizspring Java Mall, Bizspring Shop | 2026-10-26 | 6.5 Medium |
| BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request /member/payment/test_post_pay_{paymentLogSn} to obtain goods without paying or settle other members' orders. | ||||
| CVE-2026-110608 | 1 Bizspring | 2 Bizspring Java Mall, Bizspring Shop | 2026-10-26 | 5.4 Medium |
| BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive handlers that allows authenticated members to act on other members' orders by supplying their orderId. Attackers can cancel victims' pending orders to release allocated stock or confirm receipt of shipped orders, advancing fulfilment and settlement without the victim's consent. | ||||
| CVE-2026-110612 | 1 Wwwlike | 1 Vlife | 2026-10-26 | 9.8 Critical |
| vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on vlife instances. | ||||