Export limit exceeded: 421006 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (421006 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-120315 | 1 Lobehub | 1 Lobe Chat | 2026-11-06 | 8.8 High |
| LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write arbitrary files by supplying unsanitized file names to writeTempFile(). Attackers can create a file record via file.createFile with a traversal name, then trigger document parsing to overwrite application files like startServer.js for code execution or denial of service. | ||||
| CVE-2026-120311 | 1 Network-ai | 1 Network-ai | 2026-11-06 | 8.8 High |
| Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to read or delete arbitrary .json files by supplying traversal sequences in the job id. Attackers controlling the id passed to FileJobStore.get(), FileJobStore.delete(), or JobQueue.getJob() can disclose credentials and grant tokens or delete configuration files to weaken AuthGuardian authorization. | ||||
| CVE-2026-120281 | 1 Wavlink | 1 Wn536ax6-a | 2026-11-06 | 10 Critical |
| A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure. | ||||
| CVE-2026-119724 | 1 Apache | 1 Jclouds | 2026-11-06 | 7.5 High |
| ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. | ||||
| CVE-2026-119084 | 1 Aws | 1 Amazon-redshift-jdbc-driver | 2026-11-06 | 8.1 High |
| Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is available on the application classpath. To remediate this issue, users should upgrade to version 2.3.0 or later. | ||||
| CVE-2026-116669 | 1 Tanium | 1 Discover | 2026-11-06 | 6.5 Medium |
| Tanium addressed an improper access controls vulnerability in Discover. | ||||
| CVE-2026-116668 | 1 Tanium | 1 Discover | 2026-11-06 | 4.3 Medium |
| Tanium addressed an uncontrolled resource consumption vulnerability in Discover. | ||||
| CVE-2026-116667 | 1 Tanium | 1 Discover | 2026-11-06 | 4.2 Medium |
| Tanium addressed an improper access controls vulnerability in Discover. | ||||
| CVE-2026-116666 | 1 Tanium | 1 Discover | 2026-11-06 | 4.3 Medium |
| Tanium addressed an information disclosure vulnerability in Discover. | ||||
| CVE-2026-116665 | 1 Tanium | 1 Discover | 2026-11-06 | 4.3 Medium |
| Tanium addressed an information disclosure vulnerability in Discover. | ||||
| CVE-2026-116664 | 1 Tanium | 1 Discover | 2026-11-06 | 3.1 Low |
| Tanium addressed an improper access controls vulnerability in Discover. | ||||
| CVE-2026-116663 | 1 Tanium | 1 Enforce | 2026-11-06 | 6.5 Medium |
| Tanium addressed an improper access controls vulnerability in Enforce. | ||||
| CVE-2026-116654 | 1 Tanium | 1 Threat Response | 2026-11-06 | 6.5 Medium |
| Tanium addressed an improper input validation vulnerability in Threat Response. | ||||
| CVE-2026-116653 | 1 Tanium | 1 Threat Response | 2026-11-06 | 4.3 Medium |
| Tanium addressed an improper input validation vulnerability in Threat Response. | ||||
| CVE-2026-116652 | 1 Tanium | 1 Threat Response | 2026-11-06 | 4.3 Medium |
| Tanium addressed a business logic error in Threat Response. | ||||
| CVE-2026-116651 | 1 Tanium | 1 Threat Response | 2026-11-06 | 7.5 High |
| Tanium addressed an unauthorized code execution vulnerability in Threat Response. | ||||
| CVE-2026-116650 | 1 Tanium | 1 Threat Response | 2026-11-06 | 7.5 High |
| Tanium addressed an unauthorized code execution vulnerability in Threat Response. | ||||
| CVE-2026-116648 | 1 Tanium | 1 Discover | 2026-11-06 | 4.1 Medium |
| Tanium addressed an improper output sanitization vulnerability in Discover. | ||||
| CVE-2026-116646 | 1 Tanium | 1 Threat Response | 2026-11-06 | 4.3 Medium |
| Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response. | ||||
| CVE-2026-112447 | 1 Apple | 1 Macos | 2026-11-06 | 5.3 Medium |
| An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to bypass Privacy preferences. | ||||