Export limit exceeded: 29970 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 419638 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (419638 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-113881 | 1 Watchguard | 1 Fireware Os | 2026-11-04 | N/A |
| A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request. | ||||
| CVE-2026-112710 | 1 Watchguard | 1 Fireware Os | 2026-11-04 | N/A |
| A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response. | ||||
| CVE-2026-112709 | 1 Watchguard | 1 Fireware Os | 2026-11-04 | N/A |
| A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response. | ||||
| CVE-2026-112331 | 1 Gdatasoftwareag | 1 Motornet | 2026-11-04 | 7.5 High |
| Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting required CloudEvent attributes (id, source, type), the attacker triggers an ArgumentException in KafkaMessageConsumer.SingleMessageHandlingAsync that is treated as fatal, causing the host to stop and re-process the same poison record on every restart, resulting in a permanent crash-loop. | ||||
| CVE-2026-111585 | 1 Teamviewer | 3 Full Client, Portable, Remote | 2026-11-04 | 8.8 High |
| An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host. | ||||
| CVE-2026-111584 | 1 Teamviewer | 1 Teamviewer Remote - Patch Management | 2026-11-04 | 7.3 High |
| A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation. | ||||
| CVE-2026-111583 | 1 Teamviewer | 2 Full Client, Host | 2026-11-04 | 7.3 High |
| Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation. | ||||
| CVE-2026-111548 | 1 Moxa | 1 Nport W2150a-w4 W2250a-w4 Series | 2026-11-04 | N/A |
| A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational. | ||||
| CVE-2026-111107 | 1 Watchguard | 1 Fireware Os | 2026-11-04 | N/A |
| A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected. | ||||
| CVE-2026-109823 | 1 Tidewave-ai | 1 Tidewave | 2026-11-04 | N/A |
| An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to the loopback address can therefore read the tag with a same-origin request, which carries no Origin header. The paths usually reveal the local username and the project layout. This issue affects tidewave: from 0.8.0 before 0.9.2. | ||||
| CVE-2026-109090 | 1 X.org | 1 Libxi | 2026-11-04 | 7.5 High |
| A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4. | ||||
| CVE-2026-109089 | 1 X.org | 1 Libxi | 2026-11-04 | 7.5 High |
| A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server. | ||||
| CVE-2026-108333 | 1 Tanium | 2 Endpoint Configuration Toolset Solution, Threat Response | 2026-11-04 | 2.5 Low |
| Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | ||||
| CVE-2026-108332 | 1 Tanium | 2 Endpoint Configuration Toolset Solution, Threat Response | 2026-11-04 | 6.3 Medium |
| Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. | ||||
| CVE-2026-108331 | 1 Tanium | 2 Endpoint Configuration Toolset Solution, Threat Response | 2026-11-04 | 3.3 Low |
| Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | ||||
| CVE-2026-108330 | 1 Tanium | 2 Endpoint Configuration Toolset Solution, Threat Response | 2026-11-04 | 3.6 Low |
| Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | ||||
| CVE-2026-108329 | 1 Tanium | 1 Threat Response | 2026-11-04 | 8.8 High |
| Tanium addressed an unauthorized code execution vulnerability in Threat Response. | ||||
| CVE-2026-108328 | 1 Tanium | 1 Threat Response | 2026-11-04 | 4.2 Medium |
| Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. | ||||
| CVE-2026-108326 | 1 Tanium | 2 Cx-stream, Endpoint Configuration Toolset Solution | 2026-11-04 | 6.5 Medium |
| Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. | ||||
| CVE-2026-108325 | 1 Tanium | 1 Reputation | 2026-11-04 | 6.6 Medium |
| Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. | ||||