Export limit exceeded: 377394 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 377394 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (377394 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-17502 1 Ibm 1 I 2026-08-14 8.6 High
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-17468 1 Ibm 1 Documentation Offline 2026-08-14 5.3 Medium
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.
CVE-2026-12743 2 Cservit, Wordpress 2 Affiliate-toolkit – Multi-network Affiliate & Amazon Product Display, Wordpress 2026-08-14 4.9 Medium
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVE-2026-62872 1 Microsoft 15 .net, .net Framework, Windows 10 1607 and 12 more 2026-08-14 8.8 High
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
CVE-2026-62886 1 Microsoft 6 .net, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026 and 3 more 2026-08-14 7.8 High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-62897 1 Microsoft 7 .net, .net Framework, Visual Studio 2022 and 4 more 2026-08-14 7 High
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-62899 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-08-14 5.9 Medium
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-62900 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-08-14 5.9 Medium
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-62901 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-08-14 7.5 High
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-62902 1 Microsoft 4 .net, Visual Studio 2022, Visual Studio 2026 and 1 more 2026-08-14 6.5 Medium
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-64917 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-62909 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, .net and 3 more 2026-08-14 7.8 High
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-18085 1 Blackberry 2 Uem, Unified Endpoint Manager 2026-08-14 6.9 Medium
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
CVE-2026-64908 1 Microsoft 6 365 Apps, Access, Access 2016 and 3 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-18084 1 Blackberry 2 Uem, Unified Endpoint Manager 2026-08-14 6.1 Medium
Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier.
CVE-2026-64915 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64906 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-58641 3 Apple, Linux, Microsoft 4 Macos, Linux Kernel, .net and 1 more 2026-08-14 7.8 High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-63531 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63529 1 Microsoft 5 365 Apps, Office 2016, Office 2019 and 2 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.