All CVEs — page 157 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• UNSCOREDCVE-2026-908392026-09-21
• MEDIUM 6.6CVE-2026-941382026-09-21
• LOW 3.3CVE-2026-941372026-09-21
• MEDIUM 5.5CVE-2026-94185public exploit available2026-09-21
• HIGH 8.8CVE-2026-941292026-09-21

  The vulnerability in BioStar VALKYRIE 2.10.2411.0800 allows for a write-what-where condition via manipulation of the PhysicalAddress argument, which can be exploited locally. This flaw is significant as it can lead to remote code execution or other severe impacts.

• HIGH 8.8CVE-2026-941282026-09-21

  The flaw allows local attackers to manipulate the AssociatedIrp argument, leading to a write-what-where condition, potentially enabling unauthorized code execution.

• HIGH 7.3CVE-2026-94110public exploit available2026-09-21
• MEDIUM 4.7CVE-2026-94103public exploit available2026-09-21
• MEDIUM 4.3CVE-2026-94102public exploit available2026-09-21
• CRITICAL 9.9CVE-2026-941012026-09-21

  The vulnerability allows for a buffer overflow through the manipulation of the wan_num argument, leading to potential remote code execution or system compromise.

• CRITICAL 9.9CVE-2026-941002026-09-21

  The flaw is a buffer overflow vulnerability in the Netcore NBR200V2 1.3.241127.071246 firmware, specifically in the wan_config_set_vlan function. This allows remote attackers to exploit the vulnerability by manipulating the vlan_wanX.ports argument, leading to potential system compromise.

• CRITICAL 9.9CVE-2026-940992026-09-21

  A command injection vulnerability exists in the Netcore NBR200V2 1.3.241127.071246, allowing remote attackers to execute arbitrary commands via the QUERY_STRING argument in the file restore.cgi.

• CRITICAL 9.1CVE-2026-940982026-09-21

  The vulnerability allows for command injection via the QUERY_STRING argument in the Firmware Upgrade CGI Endpoint, enabling remote execution of arbitrary commands.

• CRITICAL 10CVE-2026-940972026-09-21

  A command injection vulnerability exists in the Netcore NBR200V2 1.3.241127.071246, allowing remote attackers to execute arbitrary commands via crafted arguments.

• CRITICAL 9.9CVE-2026-940962026-09-21

  A command injection vulnerability exists in the Netcore NBR200V2 1.3.241127.071246, allowing remote attackers to execute arbitrary commands via the ipv4 argument in the network_tools file.

• CRITICAL 9.9CVE-2026-940952026-09-21

  A command injection vulnerability exists in the Traceroute Diagnostic Feature of Netcore NBR200V2 1.3.241127.071246, allowing remote attackers to execute arbitrary commands via the manipulation of the 'url' argument.

• MEDIUM 4.3CVE-2026-94094public exploit available2026-09-20
• MEDIUM 6.3CVE-2026-94093public exploit available2026-09-20
• MEDIUM 5.5CVE-2026-94092public exploit available2026-09-20
• MEDIUM 5.5CVE-2026-94091public exploit available2026-09-20
• MEDIUM 6.3CVE-2026-94090public exploit available2026-09-20
• CRITICAL 10CVE-2026-94089public exploit available2026-09-20

  This vulnerability allows for a stack-based buffer overflow through the manipulation of the id/password arguments in the /webfa_authentication.cgi file, leading to potential remote code execution.

• MEDIUM 6.3CVE-2026-94051public exploit available2026-09-20
• MEDIUM 4.3CVE-2026-940502026-09-20
• MEDIUM 4.3CVE-2026-94049public exploit available2026-09-20