Export limit exceeded: 418352 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (418352 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-116659 | 1 Tanium | 1 Enforce | 2026-10-27 | 4.3 Medium |
| Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | ||||
| CVE-2026-116656 | 1 Tanium | 1 Enforce | 2026-10-27 | 7.5 High |
| Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | ||||
| CVE-2026-118132 | 1 Nextchat | 1 Nextchat | 2026-10-27 | N/A |
| NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugin schema is loaded from a remote URL, the returned content is stored in plugin.content and later rendered using React’s dangerouslySetInnerHTML without proper sanitization. An attacker can host a malicious OpenAPI schema containing HTML or JavaScript markup and trick a user into loading it through the Plugin Editor, resulting in arbitrary JavaScript execution in the NextChat origin. Successful exploitation allows access to JavaScript‑readable cookies and other client‑side data associated with the NextChat application. | ||||
| CVE-2026-109257 | 1 Freerdp | 1 Freerdp | 2026-10-27 | 5.9 Medium |
| FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the server during context teardown. | ||||
| CVE-2026-105007 | 1 Microsoft | 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more | 2026-10-27 | 8.8 High |
| An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in an elevated context. However, an attacker must first gain access to the local system with the ability to execute a malicious application in order to exploit this vulnerability. The security update addresses the vulnerability by changing how ndis.sys validates buffer length. | ||||
| CVE-2026-108328 | 1 Tanium | 1 Threat Response | 2026-10-27 | 4.2 Medium |
| Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. | ||||
| CVE-2026-108308 | 1 Tanium | 1 Patch | 2026-10-27 | 6.5 Medium |
| Tanium addressed a SQL injection vulnerability in Patch. | ||||
| CVE-2026-108310 | 1 Tanium | 1 Tanium Server | 2026-10-27 | 5.3 Medium |
| Tanium addressed a denial of service vulnerability in Tanium Server. | ||||
| CVE-2026-108313 | 1 Tanium | 1 Tanium Server | 2026-10-27 | 6.6 Medium |
| Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. | ||||
| CVE-2026-108301 | 1 Tanium | 1 Comply | 2026-10-27 | 6 Medium |
| Tanium addressed an improper access controls vulnerability in Comply. | ||||
| CVE-2026-108329 | 1 Tanium | 1 Threat Response | 2026-10-27 | 8.8 High |
| Tanium addressed an unauthorized code execution vulnerability in Threat Response. | ||||
| CVE-2026-108306 | 1 Tanium | 2 End-user-cx, Endpoint Configuration Toolset Solution | 2026-10-27 | 7.8 High |
| Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | ||||
| CVE-2026-108302 | 1 Tanium | 1 Comply | 2026-10-27 | 4.3 Medium |
| Tanium addressed an improper access controls vulnerability in Comply. | ||||
| CVE-2026-105781 | 1 Adobe | 1 Campaign Classic | 2026-10-27 | 10 Critical |
| Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-108305 | 1 Tanium | 2 End-user-cx, Endpoint Configuration Toolset Solution | 2026-10-27 | 7.8 High |
| Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | ||||
| CVE-2026-108325 | 1 Tanium | 1 Reputation | 2026-10-27 | 6.6 Medium |
| Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. | ||||
| CVE-2026-108316 | 1 Tanium | 1 Tanium Server | 2026-10-27 | 4.3 Medium |
| Tanium addressed an information disclosure vulnerability in Tanium Server. | ||||
| CVE-2026-108311 | 1 Tanium | 1 Tanium Server | 2026-10-27 | 2.7 Low |
| Tanium addressed an insufficient logging vulnerability in Tanium Server. | ||||
| CVE-2026-105008 | 1 Microsoft | 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more | 2026-10-27 | 9 Critical |
| No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-102675 | 2 Electron, Electronjs | 2 Electron, Electron | 2026-10-27 | 7.4 High |
| Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, responses served through protocol.registerFileProtocol or protocol.registerHttpProtocol for a custom scheme registered with supportFetchAPI enabled but corsEnabled disabled could remain script-readable across origins. This residual issue completes the remediation for CVE-2026-70604. Applications are affected only when they expose such a scheme and load untrusted content in the same session. Schemes intentionally registered with corsEnabled enabled remain cross-origin readable by design. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5. | ||||