Export limit exceeded: 410110 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (53075 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-76664 | 2026-10-15 | 6.4 Medium | ||
| A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations | ||||
| CVE-2026-76665 | 2026-10-15 | 7.1 High | ||
| A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow. | ||||
| CVE-2026-76666 | 2026-10-15 | 4.7 Medium | ||
| A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. | ||||
| CVE-2026-76667 | 2026-10-15 | 5.7 Medium | ||
| A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. | ||||
| CVE-2016-0010 | 1 Microsoft | 5 Excel For Mac, Office, Powerpoint For Mac and 2 more | 2026-10-15 | N/A |
| Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." | ||||
| CVE-2026-35001 | 1 Opens100 Project | 1 Opens100 | 2026-10-15 | 7 High |
| OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious grid dimension metadata that causes memory corruption when a user opens it. In the S102_VG_BathymetryCoverage::Read() function, the numPointsLatitudinal and numPointsLongitudinal values are multiplied without validation, and the 32-bit result can wrap around, producing an undersized heap buffer allocation. Subsequent writes past the end of that buffer cause a heap-based buffer overflow, leading to an application crash or potential arbitrary code execution in the context of the user who opened the file. | ||||
| CVE-2026-91807 | 4 Apple, Foxit, Foxitsoftware and 1 more | 6 Macos, Pdf Editor, Pdf Reader and 3 more | 2026-10-15 | 6.1 Medium |
| A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the soft-mask data attribute during image parsing may cause an arithmetic underflow, resulting in an out-of-bounds read and application crash. | ||||
| CVE-2026-76182 | 2026-10-15 | 5.3 Medium | ||
| In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied to the template becomes `index?p=/s&a=1`, which is interpreted as 2 query parameters: `p=/s` and `a=1`, rather than just one query parameter `p` whose value is `/s&a=1`. | ||||
| CVE-2026-18660 | 2026-10-15 | 8.2 High | ||
| In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case. | ||||
| CVE-2026-79832 | 2026-10-15 | 7.6 High | ||
| A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash. | ||||
| CVE-2026-79831 | 2026-10-15 | 6.6 Medium | ||
| A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution. | ||||
| CVE-2026-79830 | 2026-10-15 | 6.6 Medium | ||
| A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution. | ||||
| CVE-2026-79828 | 2026-10-15 | 7.1 High | ||
| A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow. | ||||
| CVE-2026-79827 | 2026-10-15 | 7.1 High | ||
| A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow. | ||||
| CVE-2026-79826 | 2026-10-15 | 7.1 High | ||
| A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow. | ||||
| CVE-2026-79825 | 2026-10-15 | 7.1 High | ||
| A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow. | ||||
| CVE-2026-79823 | 2026-10-15 | 4 Medium | ||
| HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior. | ||||
| CVE-2026-6432 | 1 Silicon Labs | 1 Sisdk | 2026-10-15 | N/A |
| Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashes or dynamic memory leakage. In order to exploit this vulnerability, an attacker would have to have the ability to send arbitrary messages on the network. The only known exploit of this vulnerability leaks a limited number of bytes from the stack. No denial-of-service, memory corruption, or remote code execution has been shown. | ||||
| CVE-2026-110872 | 1 Nodemailer | 1 Nodemailer | 2026-10-15 | 5.9 Medium |
| Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection._onData and isPartialResponse. A malicious SMTP server or on-path attacker can stream continuation lines without a completion line before authentication, blocking the Node.js event loop and exhausting memory. | ||||
| CVE-2026-110842 | 1 N8n | 1 N8n | 2026-10-15 | N/A |
| n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow:read grant can replace a built-in method with one returning a truthy value so server-side permission checks accept unheld scopes, enabling takeover of owner accounts not protected by MFA. | ||||