Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,118 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-119203 | 7.1 High | pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search | Oct 29, 2026 |
| CVE-2026-119202 | 7.5 High | @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service | Oct 29, 2026 |
| CVE-2026-119201 | 4.8 Medium | Nuxt dev server exposes generated appSecret through Vite file serving | Oct 29, 2026 |
| CVE-2026-119200 | 6.5 Medium | Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes | Oct 29, 2026 |
| CVE-2026-119199 | 5.9 Medium | Nuxt dev server exposes private runtime config through the Nitro dev bundle | Oct 29, 2026 |
| CVE-2026-119198 | 5.9 Medium | Nuxt dev server arbitrary file read through client error reports | Oct 29, 2026 |
| CVE-2026-92092 | 7.4 High | Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification | Oct 29, 2026 |
| CVE-2026-119197 | 7.5 High | pyasn1: Quadratic-complexity denial of service in binary REAL decoding | Oct 29, 2026 |
| CVE-2026-119196 | 7.5 High | pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding | Oct 29, 2026 |
| CVE-2026-119195 | 7.5 High | pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding | Oct 29, 2026 |
| CVE-2026-119194 | 7.5 High | pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding | Oct 29, 2026 |
| CVE-2026-119193 | 5.4 Medium | PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling | Oct 29, 2026 |
| CVE-2026-119191 | 7.5 High | Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer | Oct 29, 2026 |
| CVE-2026-119190 | 7.4 High | Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 | Oct 29, 2026 |
| CVE-2026-119189 | 5.9 Medium | Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage | Oct 29, 2026 |
| CVE-2026-119188 | 7.5 High | Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message | Oct 29, 2026 |
| CVE-2026-119187 | 7.5 High | Forge: Denial of service in TLS record processing via call stack exhaustion | Oct 29, 2026 |
| CVE-2026-119186 | 5.9 Medium | Forge: AES-GCM authentication bypass via unvalidated tagLength option | Oct 29, 2026 |
| CVE-2026-103093 | 9.4 Critical | Sandbox Escape via Table Rotation in ServiceNow AI Platform | Oct 29, 2026 |
| CVE-2026-118782 | 7.5 High | Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count | Oct 29, 2026 |
| CVE-2026-6877 | 5.3 Medium | Domain Separation Bypass in ServiceNow AI Platform | Oct 29, 2026 |
| CVE-2026-118781 | 2.9 Low | Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) | Oct 29, 2026 |
| CVE-2026-118780 | 3.7 Low | Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store | Oct 29, 2026 |
| CVE-2026-118779 | 7.5 High | Forge: Regular expression denial of service in PEM decoding (pem.decode) | Oct 29, 2026 |
| CVE-2026-118778 | 5.9 Medium | Forge: TLS client crash when the server sends no certificate | Oct 29, 2026 |
| CVE-2026-118777 | 4.8 Medium | Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie | Oct 29, 2026 |
| CVE-2026-103094 | 7.1 High | Cleartext Storage of OAuth Credentials in ServiceNow AI Platform | Oct 29, 2026 |
| CVE-2026-118776 | 3.7 Low | Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption | Oct 29, 2026 |
| CVE-2026-118775 | 3.7 Low | Forge: ASN.1 OID first arc truncation in asn1.oidToDer | Oct 29, 2026 |
| CVE-2026-118774 | 3.7 Low | Forge: Certificate signature verified with the issuer's RSA signature scheme | Oct 29, 2026 |
| CVE-2026-119251 | 6.7 Medium | A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device. | Oct 29, 2026 |
| CVE-2026-118773 | 6.3 Medium | Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal | Oct 29, 2026 |
| CVE-2026-119250 | 7.8 High | A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with root privileges on the host device. | Oct 29, 2026 |
| CVE-2026-119249 | 7.5 High | A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop for macOS to obtain information about the host device. | Oct 29, 2026 |
| CVE-2026-41216 | 7.5 High | An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this… | Oct 29, 2026 |
| CVE-2026-42057 | 7.5 High | An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this… | Oct 29, 2026 |
| CVE-2026-8822 | 7.5 High | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to trigger this… | Oct 29, 2026 |
| CVE-2026-8824 | 7.5 High | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to… | Oct 29, 2026 |
| CVE-2026-9535 | 8.2 High | A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this… | Oct 29, 2026 |
| CVE-2026-9536 | 7.5 High | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to… | Oct 29, 2026 |
| CVE-2026-118772 | 7.5 High | joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service | Oct 29, 2026 |
| CVE-2026-119168 | 8.8 High | Nomad allocation data migration may allow host directory permission modification via symlink following | Oct 29, 2026 |
| CVE-2026-107347 | 8.4 High | Nomad dispatch payload writes can escape the allocation directory through symlinks | Oct 29, 2026 |
| CVE-2026-102260 | 4.3 Medium | Nomad vulnerable to cross-namespace information disclosure in multiple endpoints | Oct 29, 2026 |
| CVE-2026-116566 | 5.3 Medium | socket.getaddrinfo() accepts embedded null bytes in host and port | Oct 29, 2026 |
| CVE-2026-118769 | 9.2 Critical | Botan: Integer overflow when reporting block size in FFI can cause memory corruption | Oct 29, 2026 |
| CVE-2026-118768 | 5.9 Medium | Botan: CLI utility `ocsp_check` accepts unauthenticated responses | Oct 29, 2026 |
| CVE-2026-118767 | 4.8 Medium | Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs | Oct 29, 2026 |
| CVE-2026-118766 | 6.1 Medium | Botan: Online OCSP redirects enable blind requests to internal HTTP services | Oct 29, 2026 |
| CVE-2026-118765 | 7.3 High | Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state | Oct 29, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.