Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
82,706 matching · page 2/1655Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-118623(opens NVD record) | High | 7.8 | MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickle files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29513. | Nov 4, 2026 |
| CVE-2026-114552(opens NVD record) | Medium | 6.5 | MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the parseObjectResponse method. The issue results from the lack of proper restriction of XML External Entity (XXE) references. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-29137. | Nov 4, 2026 |
| CVE-2026-114551(opens NVD record) | Medium | 5.9 | MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of mailbox credentials. The issue results from storing sensitive information in plaintext. An attacker can leverage this in conjunction with other vulnerabilities to disclose stored credentials, leading to further compromise. Was ZDI-CAN-34478. | Nov 4, 2026 |
| CVE-2026-114550(opens NVD record) | High | 8.1 | libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PUBACK packets. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31039. | Nov 4, 2026 |
| CVE-2026-114549(opens NVD record) | Critical | 9.8 | NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4443 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-30685. | Nov 4, 2026 |
| CVE-2026-121736(opens NVD record) | Medium | 5.3 | NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with client_id, redirect_uri and approved=true to insert unbounded ownerless authorization code records, limited only by rate limiting. | Nov 3, 2026 |
| CVE-2026-121735(opens NVD record) | Low | 3.7 | blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmed_sent_at. Attackers who obtain an old confirmation link from a compromised mailbox, backup, or forwarded mail can activate unconfirmed accounts and evade the unconfirmed-account cleanup job. | Nov 3, 2026 |
| CVE-2026-121734(opens NVD record) | Medium | 6.5 | ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name from public fork pull request comments to retrieve plaintext environment variables and preview basic-auth credentials. | Nov 3, 2026 |
| CVE-2026-121733(opens NVD record) | Medium | 5.4 | Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that allows authenticated customers to upload HTML files via the RMA send-message endpoint without type or extension validation. Attackers can upload a .html attachment containing JavaScript served under /storage/rma-conversation/, executing script in the shop's origin when an administrator opens it. | Nov 3, 2026 |
| CVE-2026-121732(opens NVD record) | Low | 2.7 | RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrators to assign fees and payments to students of other schools via MassAssignFees.php and MassAssignPayments.php. Attackers can substitute foreign student IDs in the student[] POST array of a modfunc=save request to alter other schools' student billing balances, breaking school isolation. | Nov 3, 2026 |
| CVE-2026-121731(opens NVD record) | High | 8.8 | RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL via the unquoted period_id parameter in StudentSummary.php. Attackers can supply payloads without single quotes into IN() clauses to extract administrator password hashes and student records through time-based queries or modify data via stacked statements. | Nov 3, 2026 |
| CVE-2026-121730(opens NVD record) | Medium | 6.5 | emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address. Attackers can supply an arbitrary from field, which is passed unchecked to the Cloudflare send call, to impersonate other users or the organization to external recipients. | Nov 3, 2026 |
| CVE-2026-121729(opens NVD record) | High | 8.3 | emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to send mail from any domain, or revoke existing keys to disable integrations. | Nov 3, 2026 |
| CVE-2026-121728(opens NVD record) | Medium | 5.3 | SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to register accounts when public registration is disabled. Attackers can obtain a CSRF token from /login and POST credentials to /register/step2, which invokes the unchecked GraphQL RegisterAccount mutation to create accounts. | Nov 3, 2026 |
| CVE-2026-121727(opens NVD record) | High | 7.5 | Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared. Attackers can send oversized first segments over many concurrent POST, PUT or DELETE connections, wrapping content_length to grow buffers unbounded and exhaust worker memory. | Nov 3, 2026 |
| CVE-2026-121582(opens NVD record) | Medium | 6.5 | A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | Nov 3, 2026 |
| CVE-2026-121581(opens NVD record) | Medium | 4.3 | A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unknown function of the file /api/v1/providers/{id}/test of the component Provider Test-Connection Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | Nov 3, 2026 |
| CVE-2026-121565(opens NVD record) | High | 7.4 | Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys. | Nov 3, 2026 |
| CVE-2026-121539(opens NVD record) | Medium | 6.3 | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component. | Nov 3, 2026 |
| CVE-2026-121535(opens NVD record) | Low | 3.7 | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file app/src/server.js of the component Room Action Handler. The manipulation results in improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The exploit has been made public and could be used. Upgrading to version 2.1.38 is able to resolve this issue. The patch is identified as 55bec1d05f931d2e43633d6d0b7274f79ec719dd. Upgrading the affected component is advised. | Nov 3, 2026 |
| CVE-2026-121520(opens NVD record) | Unscored | — | In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. namespaces may also be set, potentially giving a program on the host elevated privileges. This issue affects build services that accept build requests from untrusted users. The issue is fixed in v0.34.1. | Nov 3, 2026 |
| CVE-2026-120775(opens NVD record) | High | 7.2 | Tanium addressed a heap-based buffer overflow vulnerability in Deploy. | Nov 3, 2026 |
| CVE-2026-118237(opens NVD record) | Unscored | — | An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An attacker with an account and SSH access could re-key to an algorithm with a longer hash, causing adjacent process memory to be signed and returned to the client, where a limited amount of it may be recoverable. This vulnerability affected all releases prior to 3.23 and was fixed in versions 3.22.3, 3.21.8, 3.20.10, and 3.19.14. This vulnerability was reported via the GitHub Bug Bounty program. | Nov 3, 2026 |
| CVE-2026-116669(opens NVD record) | Medium | 6.5 | Tanium addressed an improper access controls vulnerability in Discover. | Nov 3, 2026 |
| CVE-2026-116668(opens NVD record) | Medium | 4.3 | Tanium addressed an uncontrolled resource consumption vulnerability in Discover. | Nov 3, 2026 |
| CVE-2026-116667(opens NVD record) | Medium | 4.2 | Tanium addressed an improper access controls vulnerability in Discover. | Nov 3, 2026 |
| CVE-2026-116666(opens NVD record) | Medium | 4.3 | Tanium addressed an information disclosure vulnerability in Discover. | Nov 3, 2026 |
| CVE-2026-116665(opens NVD record) | Medium | 4.3 | Tanium addressed an information disclosure vulnerability in Discover. | Nov 3, 2026 |
| CVE-2026-116664(opens NVD record) | Low | 3.1 | Tanium addressed an improper access controls vulnerability in Discover. | Nov 3, 2026 |
| CVE-2026-116663(opens NVD record) | Medium | 6.5 | Tanium addressed an improper access controls vulnerability in Enforce. | Nov 3, 2026 |
| CVE-2026-116661(opens NVD record) | Medium | 6.5 | Tanium addressed an improper access controls vulnerability in Enforce. | Nov 3, 2026 |
| CVE-2026-116654(opens NVD record) | Medium | 6.5 | Tanium addressed an improper input validation vulnerability in Threat Response. | Nov 3, 2026 |
| CVE-2026-116653(opens NVD record) | Medium | 4.3 | Tanium addressed an improper input validation vulnerability in Threat Response. | Nov 3, 2026 |
| CVE-2026-116652(opens NVD record) | Medium | 4.3 | Tanium addressed a business logic error in Threat Response. | Nov 3, 2026 |
| CVE-2026-116651(opens NVD record) | High | 7.5 | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | Nov 3, 2026 |
| CVE-2026-116650(opens NVD record) | High | 7.5 | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | Nov 3, 2026 |
| CVE-2026-116648(opens NVD record) | Medium | 4.1 | Tanium addressed an improper output sanitization vulnerability in Discover. | Nov 3, 2026 |
| CVE-2026-116646(opens NVD record) | Medium | 4.3 | Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response. | Nov 3, 2026 |
| CVE-2026-111085(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | Nov 3, 2026 |
| CVE-2026-110288(opens NVD record) | Unscored | — | A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a cross-site GET request to the integration removal endpoint without a CSRF token. Exploitation required configured ChatOps integrations and an operator visiting attacker-controlled content while signed in to the Management Console; deletion could disrupt ChatOps notifications and commands when configuration was applied or services reloaded. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.23 and was fixed in versions 3.19.14, 3.20.10, 3.21.8, and 3.22.3. This vulnerability was reported via the GitHub Bug Bounty program. | Nov 3, 2026 |
| CVE-2026-109836(opens NVD record) | Medium | 6.7 | The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written. | Nov 3, 2026 |
| CVE-2026-108516(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | Nov 3, 2026 |
| CVE-2026-108327(opens NVD record) | Medium | 5.0 | Tanium addressed a path traversal vulnerability in Tanium Data Service. | Nov 3, 2026 |
| CVE-2026-108324(opens NVD record) | Medium | 6.5 | Tanium addressed a denial of service vulnerability in Tanium Client. | Nov 3, 2026 |
| CVE-2026-107916(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | Nov 3, 2026 |
| CVE-2026-104608(opens NVD record) | Unscored | — | A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with an account and SSH access to the instance could leverage this use-after-free into a controlled write and run arbitrary commands as babeld, including disclosure of its environment secrets. Exploitation required per-build memory offsets; failed attempts crashed babeld. This affected all releases prior to 3.23 and was fixed in 3.22.3, 3.21.8, 3.20.10, and 3.19.14. This vulnerability was reported via the GitHub Bug Bounty program. | Nov 3, 2026 |
| CVE-2026-103429(opens NVD record) | Unscored | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | Nov 3, 2026 |
| CVE-2022-30267(opens NVD record) | High | 7.5 | Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution. | Nov 3, 2026 |
| CVE-2022-29966(opens NVD record) | Critical | 9.8 | Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition. | Nov 3, 2026 |
| CVE-2026-22060(opens NVD record) | Unscored | — | All versions of StorageGRID (formerly StorageGRID Webscale) in default & common configurations allow an unauthenticated attacker to access a limited set of APIs that are intended for use within the grid. | Nov 3, 2026 |