Export limit exceeded: 413900 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (413900 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-49442 | 2026-10-23 | 5.3 Medium | ||
| Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on whether the provided username exists in the system. When username exists on Cacti, in the response, they see Access Denied! Login failed. When it does not exist on Cacti, they see Access Denied! Login Failed. The only difference between the responses is the capitalization of the letter "f" in the word failed. This issue has been patched in version 1.2.31. | ||||
| CVE-2026-17545 | 3 Microsoft, Php, Php Group | 3 Windows, Php, Php | 2026-10-23 | 7.5 High |
| On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes. | ||||
| CVE-2026-100886 | 1 Seetong | 4 T8108, T8108p, T8116 and 1 more | 2026-10-23 | 10 Critical |
| A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 4.6.2.0 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2026-39902 | 2026-10-23 | 7.2 High | ||
| Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ([;&| `$\\n\r]) omitted single-quote, double-quote, redirect operators, subshell parens and braces. An authenticated admin could save an input_string` containing single-quote, redirect operator, or subshell parens, and pass the check. This issue has been patched in version 1.2.31. | ||||
| CVE-2026-46531 | 2026-10-23 | 5.5 Medium | ||
| Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tree rule item handler. A user holding the Automation realm (default General Administration role) can persist an arbitrary SQL fragment in the automation_tree_rule_items.field column. The fragment is later concatenated directly into a SELECT ... AS source FROM ... clause in lib/api_automation.php :: create_all_header_nodes() and executed when an administrator triggers automation via the standard graphs.php?action=actions&drp_action=8 ("Apply Automation Rules") bulk action. The result of the injected SELECT is written into graph_tree_items.title and rendered in the Cacti tree UI, providing a direct exfiltration channe. This issue has been patched in version 1.2.31. | ||||
| CVE-2026-79864 | 1 Hpe | 1 Aos | 2026-10-23 | 9.6 Critical |
| No description provided | ||||
| CVE-2026-79870 | 1 Hpe | 1 Aos | 2026-10-23 | 9.6 Critical |
| No description provided | ||||
| CVE-2026-79872 | 1 Hpe | 1 Aos | 2026-10-23 | 9.4 Critical |
| No description provided | ||||
| CVE-2026-79873 | 1 Hpe | 1 Aos | 2026-10-23 | 9.3 Critical |
| No description provided | ||||
| CVE-2026-79880 | 1 Hpe | 1 Aos | 2026-10-23 | 8.7 High |
| No description provided | ||||
| CVE-2026-79881 | 1 Hpe | 1 Aos | 2026-10-23 | 8.5 High |
| No description provided | ||||
| CVE-2026-79885 | 1 Hpe | 1 Aos | 2026-10-23 | 8.2 High |
| No description provided | ||||
| CVE-2026-79886 | 1 Hpe | 1 Aos | 2026-10-23 | 8.2 High |
| No description provided | ||||
| CVE-2026-79887 | 1 Hpe | 1 Aos | 2026-10-23 | 8.1 High |
| No description provided | ||||
| CVE-2026-79894 | 1 Hpe | 1 Aos | 2026-10-23 | 7.5 High |
| No description provided | ||||
| CVE-2026-95706 | 1 Hpe | 1 Aos | 2026-10-23 | 7.2 High |
| No description provided | ||||
| CVE-2026-95710 | 1 Hpe | 1 Aos | 2026-10-23 | 7.1 High |
| No description provided | ||||
| CVE-2026-114650 | 1 Mongodb | 2 C# Driver, Mongodb.libmongocrypt Nuget Package | 2026-10-23 | 5.9 Medium |
| A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side field-level encryption to be written without encryption. Under certain platform text-encoding configurations, an internal name conversion loses information, so the encryption layer fails to associate the operation with its configured encryption rules and the operation proceeds without an error being raised. An application user with the ability to write data through an affected application can therefore have sensitive fields persisted in plaintext, defeating the confidentiality guarantee that client-side encryption is intended to provide. No integrity or availability impact was observed. | ||||
| CVE-2026-115505 | 1 Sahlberg | 1 Libsmb2 | 2026-10-23 | 7.6 High |
| libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum replies with wrapping actual_count or max_count values when clients call smb2_share_enum_async(), corrupting heap memory. | ||||
| CVE-2026-115509 | 1 Jitsucom | 1 Jitsu | 2026-10-23 | 4.2 Medium |
| Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await, so the syncId ownership check never fails. Authenticated users knowing another workspace's sync ID can read, overwrite or delete its stream cursors, causing data re-ingestion or skipped data. | ||||