Export limit exceeded: 400224 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 400224 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 400224 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (400224 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-76735 | 1 Hewlett Packard Enterprise (hpe) | 1 Instant On | 2026-09-30 | 4.1 Medium |
| A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated local attacker with high privileges to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking Instant On, only if certain preconditions outside of the attacker's control are met. | ||||
| CVE-2026-76738 | 1 Hewlett Packard Enterprise (hpe) | 1 Instant On | 2026-09-30 | 2.7 Low |
| A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service, which recovers without manual intervention. | ||||
| CVE-2026-96274 | 1 Baicells | 1 Nova 430h Enodeb (model Pbs3101sh) | 2026-09-30 | 7.4 High |
| In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdown of the signaling association for the cell. This results in a temporary service disruption until the eNodeB and core network re-establish connectivity. | ||||
| CVE-2026-100291 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 9.8 Critical |
| In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations. | ||||
| CVE-2026-100292 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 8.8 High |
| In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if crafted inputs reach the underlying command handler. | ||||
| CVE-2026-100293 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 8.8 High |
| In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the device will accept as valid. | ||||
| CVE-2026-100294 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 7.5 High |
| In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation. | ||||
| CVE-2026-53989 | 1 Finsys | 1 Dockhand | 2026-09-30 | 4.7 Medium |
| Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link targeting the OIDC callback flow to capture authorization codes via the Referer header and conduct follow-up credential phishing against any Dockhand account after a legitimate login. | ||||
| CVE-2026-100295 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 6.3 Medium |
| In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access. | ||||
| CVE-2026-19588 | 2 Samsung, Samsung Open Source | 2 Rlottie, Rlottie | 2026-09-30 | 6.5 Medium |
| Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. | ||||
| CVE-2026-100296 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 8.1 High |
| In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrator password to the default value and corrupts the in-memory authentication state until the device reloads. The handler does not verify the session's privilege level, so any authenticated user can trigger it. | ||||
| CVE-2026-100297 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 5.3 Medium |
| In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries. | ||||
| CVE-2026-100298 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 8.8 High |
| In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions that are not intended for normal operation. | ||||
| CVE-2026-100299 | 1 Anjvision | 1 Yssd-rtmp-h5 | 2026-09-30 | 6.8 Medium |
| In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption. | ||||
| CVE-2026-53988 | 1 Finsys | 1 Dockhand | 2026-09-30 | 10 Critical |
| Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send unsigned webhook requests to force git clone and docker compose operations, enabling denial of service or, when combined with write access to the tracked git branch, container escape and full host compromise via attacker-controlled docker-compose.yml with privileged bind mounts. | ||||
| CVE-2026-102877 | 1 Getfider | 1 Fider | 2026-09-30 | 4.4 Medium |
| Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fider server send requests to internal services or cloud metadata endpoints. | ||||
| CVE-2026-102878 | 1 Hangwin | 1 Mcp-chrome-bridge | 2026-09-30 | 8.1 High |
| mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script execution, page content reading, and screenshot capture. | ||||
| CVE-2026-102879 | 1 Claraverse-space | 1 Claraverse | 2026-09-30 | 5 Medium |
| ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata endpoints. | ||||
| CVE-2026-94204 | 1 Viidure | 1 Dashcam Android Application | 2026-09-30 | 7.5 High |
| The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, and firmware files are exposed to anyone on the internet. | ||||
| CVE-2026-96587 | 1 Viidure | 1 Dashcam Android Application | 2026-09-30 | 10 Critical |
| The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries. | ||||