Export limit exceeded: 405556 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 405556 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (405556 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-109406 | 1 Macrozheng | 1 Mall | 2026-10-13 | 5.4 Medium |
| A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation. | ||||
| CVE-2026-89206 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 6.3 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization. | ||||
| CVE-2026-65150 | 2026-10-13 | 7.3 High | ||
| NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service. | ||||
| CVE-2026-65149 | 2026-10-13 | 7.3 High | ||
| NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering. | ||||
| CVE-2026-65147 | 2026-10-13 | 7.3 High | ||
| NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service. | ||||
| CVE-2026-109405 | 1 Conductor-oss | 1 Conductor | 2026-10-13 | 7.3 High |
| A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/conductor/contribs/tasks/kafka/KafkaPublishTask.java. The manipulation of the argument kafka_request.bootStrapServers results in server-side request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. | ||||
| CVE-2026-101020 | 2026-10-13 | N/A | ||
| An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges. | ||||
| CVE-2026-89196 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 8.8 High |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. | ||||
| CVE-2026-89197 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 8.8 High |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. | ||||
| CVE-2026-89200 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 6.7 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database. | ||||
| CVE-2026-89201 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 7.5 High |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. | ||||
| CVE-2026-89202 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 6.5 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service. | ||||
| CVE-2026-89204 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 5.4 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation. | ||||
| CVE-2026-89205 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 6.3 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices. | ||||
| CVE-2026-109783 | 2026-10-13 | N/A | ||
| Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5. | ||||
| CVE-2026-109782 | 2026-10-13 | N/A | ||
| Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5. | ||||
| CVE-2026-109780 | 2026-10-13 | N/A | ||
| Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109776 | 2026-10-13 | N/A | ||
| Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109774 | 2026-10-13 | N/A | ||
| Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109772 | 2026-10-13 | N/A | ||
| Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158. | ||||