All CVEs — page 537 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• UNSCOREDCVE-2026-945722026-09-21
• UNSCOREDCVE-2026-945712026-09-21
• HIGH 8.8CVE-2026-944242026-09-21

  The vulnerability in Moore Threads MTT S80 Driver Package up to 340.150 allows for a heap-based buffer overflow, which can lead to remote code execution if exploited.

• MEDIUM 5.5CVE-2026-934332026-09-21

  The flaw in libstoragemgmt allows an attacker to cause a stack buffer overflow by providing malformed SCSI VPD page 0x80 data, leading to potential denial of service.

• HIGH 7.1CVE-2026-88746public exploit available2026-09-21
• MEDIUM 6.1CVE-2026-88745public exploit available2026-09-21
• UNSCOREDCVE-2026-88467public exploit available2026-09-21
• MEDIUM 5.3CVE-2026-88412public exploit available2026-09-21

  The flaw involves an integer overflow in FalkorDB's Redis module v4.20.1, allowing attackers to cause a Denial of Service via crafted input, which could disrupt service availability.

• HIGH 7.5CVE-2026-88411public exploit available2026-09-21

  The flaw involves improper error handling in FalkorDB v4.20.1's GRAPH.EFFECT component, leading to a Denial of Service (DoS). This matters because attackers can exploit it to disrupt service without needing specific privileges.

• HIGH 7.1CVE-2026-88410public exploit available2026-09-21

  The flaw in FalkorDB's graph.UDF module allows unauthorized read operations, but no write commands are registered, leading to potential data exposure and integrity issues.

• HIGH 8.8CVE-2026-88409public exploit available2026-09-21

  The flaw in FalkorDB (Redis module) v4.20.1 to v4.20.4 involves a buffer overflow in the _Decode_GrB_Matrix function, allowing attackers to cause a Denial of Service (DoS) via crafted input. This vulnerability is significant because it can lead to service disruption without requiring user interaction.

• MEDIUM 6.5CVE-2026-88408public exploit available2026-09-21

  The flaw in FalkorDB (Redis module) allows attackers to cause a Denial of Service via a stack overflow from a crafted input, impacting system availability.

• HIGH 7.5CVE-2026-88407public exploit available2026-09-21

  The flaw in FalkorDB (Redis module) allows out-of-bounds read leading to Denial of Service via crafted input, posing a significant risk.

• HIGH 7.5CVE-2026-88406public exploit available2026-09-21

  The flaw in FalkorDB (Redis module) allows attackers to cause a Denial of Service via a stack overflow from a crafted input, compromising system availability.

• CRITICAL 9.8CVE-2026-88405public exploit available2026-09-21

  The vulnerability allows attackers to execute arbitrary code via a crafted payload, posing a critical risk due to remote code execution capabilities.

• CRITICAL 9.8CVE-2026-88404public exploit available2026-09-21

  This vulnerability allows attackers to execute arbitrary code via a crafted payload, posing a critical risk due to remote code execution capabilities.

• MEDIUM 6.5CVE-2026-88403public exploit available2026-09-21
• CRITICAL 9.8CVE-2026-88402public exploit available2026-09-21

  A SQL injection vulnerability in nocobase v2.1.21 enables attackers to access sensitive database information by injecting malicious SQL statements, posing a critical risk.

• MEDIUM 6.3CVE-2026-79919public exploit available2026-09-21

  The flaw allows authenticated workspace members to bypass sandbox restrictions and perform file operations or execute processes as the sandbox user, due to improper handling of ctypes.CDLL in function-library code.

• MEDIUM 6.3CVE-2026-79918public exploit available2026-09-21

  The flaw allows an authenticated attacker to execute code outside the sandbox by leveraging fexecve, posing a risk to system security.

• MEDIUM 6.5CVE-2026-79917public exploit available2026-09-21

  The flaw allows an attacker to create public ChatShareLinks and PublicFileAccess states for a victim's conversation without proper authentication, exposing sensitive information.

• CRITICAL 9.1CVE-2026-79916public exploit available2026-09-21

  The flaw allows authenticated users to inject control characters into AWS credentials, enabling command execution as root.

• MEDIUM 4.8CVE-2026-79317public exploit available2026-09-21
• HIGH 7.6CVE-2026-79316public exploit available2026-09-21

  An authenticated user can modify xray configuration templates to make the management service accessible from non-loopback addresses, expanding the attack surface beyond its intended local-only boundary. This allows attackers to potentially access the xray management interface from external networks.

• MEDIUM 4.2CVE-2026-77525public exploit available2026-09-21

  The flaw allows a normal user to read victim chat records by misusing application_id and chat_id values, posing a risk to data privacy within the same workspace.