All CVEs — page 263 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
CVE-2026-76480 involves improper authentication issues that could allow unauthorized access to the system.
CVE-2026-76472 involves improper neutralization of special elements, potentially leading to arbitrary code execution.
This vulnerability allows an attacker to execute arbitrary code with root privileges or cause a DoS condition by sending a crafted HTTP request to the NX-API, posing a significant risk to the device's security and availability.
CVE-2026-76470 involves incorrect calculation issues that could lead to high impact vulnerabilities, such as data corruption, service disruption, and unauthorized access.
This vulnerability involves improper input validation that allows attackers to potentially manipulate system behavior through crafted inputs. The flaw is categorized under CWE-20 (Improper Input Validation) which is a fundamental security weakness affecting how applications process user-supplied data.
The vulnerability stems from improper resource control during its lifetime, allowing potential for resource exhaustion or manipulation that could lead to system instability or denial of service. This affects Cisco networking devices and represents a hardening issue discovered through internal security review.
This vulnerability allows an unauthenticated attacker to execute arbitrary code with root privileges or cause a DoS condition by sending a crafted MPLS echo-request packet.
This flaw involves buffer management issues that could lead to remote code execution if exploited, making it a critical vulnerability.
CVE-2026-76463 involves improper access control issues, allowing unauthorized access to sensitive data or features.
CVE-2026-76459 involves out-of-bounds write issues that could allow an attacker to execute arbitrary code, leading to a high severity vulnerability.
This vulnerability involves improper handling of exceptional conditions, which could lead to a denial of service or potentially other impacts if exploited.
CVE-2026-76457 involves out-of-bounds read issues that could allow an attacker to read sensitive information, though no complete exploit is publicly known.
This flaw involves improper input validation, allowing special command elements to be misinterpreted, which could lead to unauthorized access or system compromise.
The flaw involves improper access control issues, allowing unauthorized access to sensitive data and functionalities.
The vulnerability allows unauthenticated attackers to write arbitrary files or cause a DoS condition, due to improper input validation and lack of authentication in the management API.
This flaw involves improper neutralization issues, allowing potential attackers to exploit vulnerabilities in the Cisco NX-OS software.
The flaw allows unauthenticated access to protected API endpoints due to an empty JWT secret, making sensitive data and functionality vulnerable.
The flaw in Homer allows for unauthorized access to the admin account with a hardcoded password, enabling full administrative control.
A SQL injection vulnerability in Homer's V4StatisticsQuery handler allows authenticated users to execute arbitrary SQL commands against the FlightSQL service database. This occurs because user-supplied rawquery input is not validated before being passed to DuckDB, potentially enabling attackers to access or manipulate sensitive telecom data.
The flaw allows an attacker to inject arbitrary Python code by controlling the `agents_file` parameter, leading to remote code execution.
The flaw is a password reset process vulnerability in Cisco License On-Prem, allowing unauthenticated attackers to reset arbitrary user passwords, potentially gaining unauthorized access. This matters because it can lead to unauthorized access to critical systems.