Export limit exceeded: 415459 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415459 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (415459 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-117513 | 1 Oretnom23 | 1 Php-travel-agency-system | 2026-10-27 | 7.3 High |
| A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search Pages. Executing a manipulation of the argument customer_name/voucher_no/emp_name can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet. | ||||
| CVE-2026-117941 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117946 | 2026-10-27 | N/A | ||
| Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117953 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. | ||||
| CVE-2026-117957 | 2026-10-27 | N/A | ||
| Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. | ||||
| CVE-2026-117971 | 2026-10-27 | N/A | ||
| Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117972 | 2026-10-27 | N/A | ||
| Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. | ||||
| CVE-2026-117973 | 2026-10-27 | N/A | ||
| Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. | ||||
| CVE-2026-117974 | 2026-10-27 | N/A | ||
| Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117916 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. | ||||
| CVE-2026-117922 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117925 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117930 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117931 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117933 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. | ||||
| CVE-2026-117934 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117937 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-117939 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. | ||||
| CVE-2026-116674 | 2026-10-27 | 6.5 Medium | ||
| systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interface data in the plain-object _network cache and indexes it with the sanitized caller-controlled interface name. Passing proto causes the inherited Object.prototype value to be used instead of creating an own cache entry, so calcNetworkSpeed() writes rx_bytes, tx_bytes, rx_sec, tx_sec, ms, last_ms, and operstate onto Object.prototype. The polluted property names are fixed and their values come from interface statistics, but inherited-name collisions and enumerable keys can corrupt application branching, serialization, configuration merging, validation, or lookup behavior. This issue is fixed in version 5.33.13. | ||||
| CVE-2026-57185 | 2026-10-27 | 6.5 Medium | ||
| Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the `PJSIP MWI body parser` by sending a carefully crafted `SIP NOTIFY` request. The attacker must pass SIP authentication using either a username/password or `source IP address matching`. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3. | ||||