All CVEs — page 262 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows attackers to cause memory exhaustion or process panics by crafting malicious Excel files with oversized stream sizes in the Compound File Binary format, potentially leading to denial of service.
Excelize library has a decryption vulnerability where insufficient validation allows attacker-controlled data to cause Go runtime panics, leading to process termination. This affects versions 2.3.1 through 2.11.0 and can be exploited via malformed Excel files.
Excelize library has a memory exhaustion vulnerability where crafted Excel files can cause excessive CPU consumption when reading rows, allowing attackers to perform resource exhaustion attacks through malformed spreadsheet data.
The flaw is a deserialization of untrusted data vulnerability that allows object injection, leading to potential remote code execution. This matters because it can be exploited to gain full control over the system.
A SQL Injection vulnerability in WP Data Access allows Blind SQL Injection, which can be exploited to extract sensitive information from the database.
A deserialization vulnerability allows for object injection, leading to potential remote code execution.
This vulnerability allows unauthenticated attackers to execute arbitrary code with root privileges or cause a denial of service on Cisco NX-OS devices by sending crafted packets.
CVE-2026-76500 involves improper control of a resource through its lifetime, potentially allowing unauthorized access or manipulation. This flaw is critical due to its high severity and the ability to cause significant harm if exploited.
The flaw involves improper neutralization issues, allowing attackers to exploit vulnerabilities in the Cisco Application Policy Infrastructure Controller (APIC). This matters because it could lead to significant security breaches, including data compromise, system integrity damage, and operational disruption.
CVE-2026-76498 involves improper access control issues, allowing unauthorized access to sensitive data and functionalities within the Cisco APIC.
This vulnerability allows an unauthenticated attacker to execute arbitrary code with root privileges or cause a Denial-of-Service (DoS) condition by sending crafted packets to an IP interface on an affected device.
This vulnerability allows an unauthenticated attacker to execute arbitrary code with root privileges or cause a Denial-of-Service (DoS) condition by sending crafted packets to an IP interface on an affected device.
CVE-2026-76484 involves insufficient protection against code injection, allowing attackers to inject malicious code, which could lead to unauthorized access and system compromise.
The flaw involves insufficiently protected credentials, allowing potential unauthorized access. This matters because it could lead to sensitive data exposure or system compromise.
CVE-2026-76482 involves improper input verification, potentially allowing unauthorized access or manipulation of data.