Export limit exceeded: 405543 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (405543 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-59838 | 1 Monkeytype | 1 Monkeytype | 2026-10-13 | 5.4 Medium |
| Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been fixed in version 25.44.0. | ||||
| CVE-2026-69150 | 2026-10-13 | N/A | ||
| KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream that references the earlier UUID, parseCustomIcons4() calls Entry::setIcon through the stale pointer, causing a heap use-after-free with a controlled write and a reliable process crash. This issue is fixed in version 2.8.0-beta1. | ||||
| CVE-2026-96119 | 1 Ibm | 1 I | 2026-10-13 | 9.9 Critical |
| IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application. | ||||
| CVE-2026-93907 | 1 Ibm | 1 Websphere Application Server | 2026-10-13 | 8.1 High |
| IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler. | ||||
| CVE-2026-93891 | 1 Ibm | 1 Tririga Application Platform | 2026-10-13 | 7.6 High |
| IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw. | ||||
| CVE-2026-92832 | 1 Ibm | 1 Aspera Enterprise Webapps | 2026-10-13 | 5.1 Medium |
| IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information. | ||||
| CVE-2026-90921 | 1 Ibm | 1 Maximo Ai Service | 2026-10-13 | 7.5 High |
| IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process. | ||||
| CVE-2026-90920 | 1 Ibm | 1 Maximo Ai Service | 2026-10-13 | 9.8 Critical |
| IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation. | ||||
| CVE-2026-90911 | 1 Ibm | 1 Maximo Ai Service | 2026-10-13 | 7.5 High |
| IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | ||||
| CVE-2026-82103 | 1 Ibm | 1 Datastage On Cloud Pak For Data | 2026-10-13 | 9.6 Critical |
| IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor. | ||||
| CVE-2026-78673 | 1 Ibm | 1 Maximo Ai Service | 2026-10-13 | 7.5 High |
| IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation. | ||||
| CVE-2026-75782 | 1 Ibm | 1 Aspera Enterprise Webapps | 2026-10-13 | 7.8 High |
| IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable. | ||||
| CVE-2026-75076 | 1 Ibm | 1 Aspera Enterprise Webapps | 2026-10-13 | 4.3 Medium |
| IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files. | ||||
| CVE-2026-65172 | 2026-10-13 | 8.6 High | ||
| NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines. | ||||
| CVE-2026-18517 | 1 Ibm | 1 Maximo Application Suite Location Service For Esri Component | 2026-10-13 | 7.7 High |
| IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy. | ||||
| CVE-2026-109781 | 2026-10-13 | 6.5 Medium | ||
| Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109779 | 2026-10-13 | 4.2 Medium | ||
| Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109777 | 2026-10-13 | 4.3 Medium | ||
| Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109775 | 2026-10-13 | 6.5 Medium | ||
| Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109773 | 2026-10-13 | 6.5 Medium | ||
| Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158. | ||||