Export limit exceeded: 237697 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (237697 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-86343 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 6.8 Medium |
| An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks. | ||||
| CVE-2026-85098 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 5.3 Medium |
| A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct limited denial-of-service attacks. | ||||
| CVE-2026-85101 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 8.6 High |
| An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager (DSM) before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read specific files, write arbitrary files, and conduct limited denial-of-service attacks. | ||||
| CVE-2026-126940 | 1 Diced | 1 Zipline | 2026-11-14 | 6.5 Medium |
| Zipline before 4.6.4 contains a rate limit bypass vulnerability that allows remote attackers to evade request limits by varying query strings or supplying the x-zipline-p-filename header. Attackers can append differing query parameters to login and file or short-link password verification endpoints to perform credential guessing beyond the intended rate limits. | ||||
| CVE-2026-126938 | 1 Diced | 1 Zipline | 2026-11-14 | 7.1 High |
| Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with large declared offsets, causing the server to create oversized files and exhaust disk space. | ||||
| CVE-2026-126937 | 1 Diced | 1 Zipline | 2026-11-14 | 8.1 High |
| Zipline before 4.6.5 contains a TOCTOU race condition in the POST /api/setup endpoint that allows unauthenticated attackers to create multiple SUPERADMIN accounts by racing concurrent requests before the firstSetup flag is reset. Attackers can send simultaneous requests with spoofed X-Forwarded-For headers during the argon2 hashing window to gain full administrative control of the instance. | ||||
| CVE-2026-77873 | 1 Lenovo | 1 System Update | 2026-11-14 | 7.3 High |
| An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges. | ||||
| CVE-2026-77882 | 1 Lenovo | 1 System Update | 2026-11-14 | 7.8 High |
| A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges. | ||||
| CVE-2026-77168 | 1 Revive | 1 Adserver | 2026-11-14 | N/A |
| A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an attacker to modify a tracker's name, description or advertiser assignment using an authenticated victim's permissions. A leftover state-changing handler accepts request parameters without verifying a CSRF token, although it is not used by the normal invocation-tag interface. Exploitation requires victim interaction and a request path that carries the victim's session credentials. The issue is fixed in Revive Adserver 6.0.9 by removing the unused tracker-modification handler. | ||||
| CVE-2026-74857 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 8.8 High |
| A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks. | ||||
| CVE-2026-81584 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 8.1 High |
| An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers with control over a compromised LDAP or Active Directory server to read or write arbitrary files and conduct denial-of-service attacks. | ||||
| CVE-2026-75785 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 7.2 High |
| An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks. | ||||
| CVE-2026-81557 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 5.4 Medium |
| An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files. | ||||
| CVE-2026-77738 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 4.3 Medium |
| A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files. | ||||
| CVE-2026-81559 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 4.3 Medium |
| A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files. | ||||
| CVE-2026-76954 | 1 Synology | 1 Diskstation Manager | 2026-11-14 | 9.8 Critical |
| An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks. | ||||
| CVE-2026-126936 | 1 Diced | 1 Zipline | 2026-11-14 | 5.9 Medium |
| Zipline before 4.7.0 contains a race condition vulnerability that allows users to bypass invitation usage limits, upload storage quotas, and shortened-URL quotas through concurrent requests. Attackers can send overlapping registration, upload, or URL creation requests that pass checks against stale state, creating extra accounts and exceeding administrator-configured resource quotas. | ||||
| CVE-2026-126494 | 2 Open-emr, Openemr | 2 Openemr, Openemr | 2026-11-14 | 7.1 High |
| OpenEMR before 8.4.0 contains an improper authorization vulnerability in ScopeRepository::finalizeScopes() that allows read-only SMART/OAuth clients to obtain write scopes because ScopeEntity::containsScope() ignores registered permissions. Attackers with a client registered for user/<resource>.read can request user/<resource>.write to create, update, and delete appointments or patient data. | ||||
| CVE-2026-126491 | 2 Open-emr, Openemr | 2 Openemr, Openemr | 2026-11-14 | 7.6 High |
| OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics() where layout_options field_id values are concatenated into the patient search WHERE clause. Attackers with Layout Editor access can plant a malicious field_id, allowing any authenticated low-privilege user to exfiltrate data from patient_data and users_secure tables. | ||||
| CVE-2026-126489 | 2 Open-emr, Openemr | 2 Openemr, Openemr | 2026-11-14 | 7.2 High |
| OpenEMR before 8.5.0 contains a second-order SQL injection vulnerability in the IPPF contraceptive issue feature because issue_ippf_con_save concatenates layout_options field_id values into a REPLACE INTO query as column names. Authenticated administrators can add a malicious field_id via edit_layout.php, then trigger issue_ippf_con_save through add_edit_issue.php to execute arbitrary SQL. | ||||