All CVEs — page 1119 of 1220

The complete archive, 25 per page, newest first. 30483 records. Search instead.

• HIGH 8.8CVE-2026-79314public exploit available2026-09-22

  A vulnerability allows an authenticated user to modify the inbound proxy configurations of other users, leading to unauthorized data modification.

• CRITICAL 9.8CVE-2026-79313public exploit available2026-09-22

  The flaw allows an attacker to replay an expired session, gaining unauthorized access to protected resources. This is critical as it bypasses the intended session expiration mechanism.

• HIGH 8.8CVE-2026-65179public exploit available2026-09-22

  The vulnerability in NVIDIA NeMo's TabularTokenizer class allows an attacker to execute arbitrary code by deserializing an untrusted .pkl file, leading to significant security risks.

• HIGH 7.8CVE-2026-65178public exploit available2026-09-22

  The flaw allows a maliciously crafted model_config.yaml to inject unsafe parameters, leading to code execution, data tampering, denial of service, and information disclosure.

• HIGH 8CVE-2026-65130public exploit available2026-09-22

  This vulnerability in NVIDIA Infrastructure Controller for Linux allows an attacker to inject OS commands, potentially leading to code execution and data tampering.

• MEDIUM 6.7CVE-2026-65129public exploit available2026-09-22
• HIGH 8.8CVE-2026-65128public exploit available2026-09-22

  This vulnerability in NVIDIA Infrastructure Controller for Linux allows an attacker to inject SQL commands, potentially leading to code execution, data tampering, denial of service, and information disclosure.

• MEDIUM 4.1CVE-2026-65127public exploit available2026-09-22
• MEDIUM 5CVE-2026-65126public exploit available2026-09-22
• MEDIUM 6.6CVE-2026-65125public exploit available2026-09-22
• MEDIUM 5.9CVE-2026-65124public exploit available2026-09-22
• HIGH 8.2CVE-2026-65121public exploit available2026-09-22

  The vulnerability in NVIDIA Infrastructure Controller for Linux allows an attacker to bypass authentication, potentially leading to privilege escalation, information disclosure, and data tampering.

• HIGH 7.5CVE-2026-65118public exploit available2026-09-22

  NVIDIA's Linux infrastructure controller has a certificate validation flaw that could allow attackers to perform man-in-the-middle attacks, potentially leading to data theft, tampering, and service disruption.

• MEDIUM 5CVE-2026-65117public exploit available2026-09-22
• MEDIUM 6.5CVE-2026-65115public exploit available2026-09-22
• HIGH 8.3CVE-2026-65114public exploit available2026-09-22

  The flaw allows an attacker to bypass authentication for a critical function, potentially leading to data tampering, denial of service, and information disclosure.

• CRITICAL 9.8CVE-2026-65113public exploit available2026-09-22

  This vulnerability in NVIDIA Infrastructure Controller for Linux allows attackers to exploit hard-coded credentials, leading to potential privilege escalation, data tampering, denial of service, and information disclosure.

• MEDIUM 6.5CVE-2026-65112public exploit available2026-09-22
• HIGH 7.8CVE-2026-65111public exploit available2026-09-22

  The vulnerability in NVIDIA NeMo Speech allows code injection via malicious input, leading to potential code execution, information disclosure, and data tampering.

• HIGH 7.8CVE-2026-24267public exploit available2026-09-22

  The vulnerability in NVIDIA NeMo Speech allows for remote code execution via malicious data, posing a significant risk to system security.

• HIGH 7.8CVE-2026-24239public exploit available2026-09-22

  The vulnerability in NVIDIA NeMo Speech allows remote code execution through malicious data, posing a significant risk to system security.

• UNSCOREDCVE-2026-199152026-09-22
• UNSCOREDCVE-2026-95682public exploit available2026-09-22
• UNSCOREDCVE-2026-95679public exploit available2026-09-22
• CRITICAL 9.8CVE-2026-956752026-09-22

  The flaw is an unauthenticated remote code execution vulnerability in D-Link DAP-1360 firmware versions 6.14 and earlier, allowing attackers to execute arbitrary commands as root via crafted web requests. This vulnerability is critical as it enables full device compromise and potential network pivoting.