Export limit exceeded: 17022 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 417909 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (417909 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-107457 | 1 Qt | 2 Qt, Qtmqtt | 2026-11-02 | N/A |
| A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash. | ||||
| CVE-2026-86469 | 1 Redhat | 5 Enterprise Linux, Hardened Images, Hummingbird and 2 more | 2026-11-02 | 5.3 Medium |
| A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the destination directory can win that race and redirect the write to another file. | ||||
| CVE-2024-7358 | 2 Getscreen, Point B Ltd | 2 Getscreen, Getscreen Agent | 2026-11-02 | 7.8 High |
| A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised. | ||||
| CVE-2026-101181 | 2026-11-02 | 5.5 Medium | ||
| Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101182 | 2026-11-02 | 5.9 Medium | ||
| Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101183 | 2026-11-02 | 5.9 Medium | ||
| UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101185 | 2026-11-02 | 5.9 Medium | ||
| OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101186 | 2026-11-02 | 7.5 High | ||
| DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101176 | 2026-11-02 | 7.1 High | ||
| Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101174 | 2026-11-02 | 5.7 Medium | ||
| DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-103310 | 2026-11-02 | 5.3 Medium | ||
| The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the merchant secret is unset, which is the default state, allowing unauthenticated attackers to forge a payment confirmation and mark any order as paid without payment. | ||||
| CVE-2026-110975 | 2026-11-02 | 7.4 High | ||
| A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint (GET /datasources) and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration with no field-exclusion strategy. As a result, the authentication secrets stored for each configured monitoring datasource (basic-auth passwords, bearer tokens, API keys, and OAuth2 client secrets) were returned in cleartext to any client able to reach the service. An attacker with network access to Autotune could harvest these credentials and reuse them to authenticate to the backing monitoring stack. | ||||
| CVE-2026-101170 | 2026-11-02 | 4 Medium | ||
| DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-18199 | 1 Zohocorp | 2 Manageengine Pam360, Manageengine Password Manager Pro | 2026-11-02 | 8.8 High |
| Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability. | ||||
| CVE-2026-101172 | 2026-11-02 | 6.2 Medium | ||
| Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality. | ||||
| CVE-2026-101171 | 2026-11-02 | 3.6 Low | ||
| Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity. | ||||
| CVE-2026-101175 | 2026-11-02 | 4.3 Medium | ||
| Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101179 | 2026-11-02 | 4.7 Medium | ||
| Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101180 | 2026-11-02 | 4.3 Medium | ||
| DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101184 | 2026-11-02 | 5.5 Medium | ||
| Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||