Export limit exceeded: 228104 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (228104 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-124627 | 2026-11-12 | N/A | ||
| In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could result in that user receiving the LDAP-mapped team memberships and associated permissions of another user. This issue only affects instances with LDAP authentication enabled and LDAP groups mapped to Octopus teams. | ||||
| CVE-2026-116835 | 2026-11-12 | N/A | ||
| In affected versions of Octopus Server, insufficient validation of custom claims on OIDC accounts allowed a user with permission to edit accounts to cause Octopus Server to issue signed OIDC tokens that impersonate a different project. This could grant access to external systems, such as cloud providers or other Octopus instances, that trust that project's identity. | ||||
| CVE-2026-123710 | 1 Redhat | 1 Quay | 2026-11-12 | 9.8 Critical |
| A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key are accepted for any repository, allowing read and write access to private images and replacement of repository tags. | ||||
| CVE-2026-110697 | 1 Redhat | 2 Openshift Update Service, Quay | 2026-11-12 | 9.9 Critical |
| A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations. | ||||
| CVE-2026-121737 | 2026-11-12 | N/A | ||
| When a remote, unauthenticated HTTP/1.1 client pipelined the start of a second request and then stopped reading, proxygen's coroutine-based HTTP session could free that pipelined stream while resetting the connection's streams on the resulting write timeout, then go on to use it. This can crash the server, leading to denial of service, and may allow memory corruption with further impact. This issue affects proxygen versions prior to v2026.11.09.00. | ||||
| CVE-2026-122095 | 2026-11-12 | 7.6 High | ||
| AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon upload function. An authenticated user with ordinary application privileges can upload an SVG file containing embedded JavaScript, which is served from the application origin. Normal menu rendering uses an HTML <img> element and does not execute the SVG script; exploitation requires a victim to load the uploaded SVG as a document (by directly navigating to its URL, or via <object>/<iframe>), in which case the script executes under the application origin. | ||||
| CVE-2026-121528 | 1 Fortinet | 1 Fortios | 2026-11-12 | 7.7 High |
| A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website. | ||||
| CVE-2026-106140 | 2 Progress, Progress Software | 2 Telerik Reporting, Telerik Reporting | 2026-11-12 | 7.3 High |
| In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editing operations. | ||||
| CVE-2026-114369 | 1 Qt | 3 Qt, Qt Framework, Qtwebsockets | 2026-11-12 | N/A |
| Resource exhaustion vulnerability in the Qt Framework QWebSocket and QWebSocketServer classes of the Qt WebSockets module | ||||
| CVE-2026-111760 | 1 Git | 1 Git | 2026-11-12 | 8.8 High |
| A flaw was found in Git. Unsafe handling of submodule-related repository metadata during recursive clone operations can lead to arbitrary code execution. A remote attacker could exploit this vulnerability by supplying a crafted repository that triggers unauthorized command execution on the host system when cloned recursively. | ||||
| CVE-2026-114466 | 1 Git | 1 Git | 2026-11-12 | 4.4 Medium |
| Arbitrary data can be read or written through git-fast-import(1) and git-fast-export(1) features not marked unsafe | ||||
| CVE-2026-114467 | 2 Git, Git-scm | 2 Git, Git | 2026-11-12 | 3.3 Low |
| Out-of-bounds write possible in Git when git-merge(1) used on tag with more than two GPG signatures | ||||
| CVE-2026-114469 | 1 Git | 1 Git | 2026-11-12 | 4.4 Medium |
| Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size | ||||
| CVE-2026-127058 | 2026-11-12 | 4.9 Medium | ||
| WonderCMS before 3.7.0 contains an unverified password change vulnerability in the saveAction functionality that allows an authenticated attacker to change the administrator password without re-authentication. Attackers can exploit this missing re-verification check during password changes to bypass re-authentication controls and maintain or escalate unauthorized access to the administrative account. | ||||
| CVE-2026-97845 | 1 Qt | 3 Qt, Qt5compat, Qtbase | 2026-11-12 | N/A |
| An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5). | ||||
| CVE-2026-126256 | 1 Fortinet | 1 Fortios | 2026-11-12 | 7.4 High |
| A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow a remote privileged attacker to execute arbitrary code or command via crafted paquets. | ||||
| CVE-2026-121530 | 1 Fortinet | 1 Fortios | 2026-11-12 | 5.9 Medium |
| A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password | ||||
| CVE-2026-112314 | 2 Red Hat, Redhat | 5 Enterprise Linux, Enterprise Linux, Hardened Images and 2 more | 2026-11-12 | 7.5 High |
| clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries. | ||||
| CVE-2026-119079 | 2 Red Hat, Redhat | 5 Enterprise Linux, Enterprise Linux, Hardened Images and 2 more | 2026-11-12 | 7.5 High |
| decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP. | ||||
| CVE-2026-112323 | 2 Red Hat, Redhat | 5 Enterprise Linux, Enterprise Linux, Hardened Images and 2 more | 2026-11-12 | 7.5 High |
| The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed. | ||||