Search

Search Results (351586 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-29963 1 Hsclabs 1 Mailinspector 2026-05-19 7.5 High
HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint. The text parameter is used to construct file paths without adequate normalization or restriction to a safe base directory. A remote attacker can exploit this flaw to access arbitrary files on the underlying operating system, resulting in unauthorized disclosure of sensitive information.
CVE-2026-8966 1 Mozilla 1 Firefox 2026-05-19 N/A
Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
CVE-2026-41470 2026-05-19 5.9 Medium
LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions.
CVE-2026-8954 1 Mozilla 2 Firefox, Thunderbird 2026-05-19 7.5 High
Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
CVE-2026-8370 1 Broadcom 1 Automic Automation 2026-05-19 N/A
Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, Solaris Sparc 64 allows Privilege Escalation, Target Programs with Elevated Privileges. This issue affects Automic Automation: < 24.4.4 HF1.
CVE-2026-34154 2026-05-19 N/A
Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, a vulnerability in the discourse-subscriptions plugin allows users to gain access to subscription-gated groups without completing payment. This issue has been fixed in versions 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1.
CVE-2021-43875 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-42295 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 5.5 Medium
Visual Basic for Applications Information Disclosure Vulnerability
CVE-2025-21338 1 Microsoft 29 Office, Office Long Term Servicing Channel, Office Macos and 26 more 2026-05-19 7.8 High
GDI+ Remote Code Execution Vulnerability
CVE-2021-42293 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 6.5 Medium
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability
CVE-2021-43255 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 5.5 Medium
Microsoft Office Trust Center Spoofing Vulnerability
CVE-2022-24510 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-26934 1 Microsoft 28 365 Apps, Office, Office Long Term Servicing Channel and 25 more 2026-05-19 6.5 Medium
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-29109 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41060 1 Microsoft 8 365 Apps, Office, Office Long Term Servicing Channel and 5 more 2026-05-19 5.5 Medium
Microsoft Word Information Disclosure Vulnerability
CVE-2022-41061 1 Microsoft 8 365 Apps, Office, Office Long Term Servicing Channel and 5 more 2026-05-19 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41063 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2026-05-19 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41106 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2026-05-19 8.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-44695 1 Microsoft 8 365 Apps, Office, Office 2019 and 5 more 2026-05-19 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-29333 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-05-19 3.3 Low
Microsoft Access Denial of Service Vulnerability