Export limit exceeded: 413513 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (413513 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-79882 | 2026-10-23 | 8.3 High | ||
| No description provided | ||||
| CVE-2026-79890 | 2026-10-23 | 8.1 High | ||
| No description provided | ||||
| CVE-2026-95707 | 2026-10-23 | 7.2 High | ||
| No description provided | ||||
| CVE-2026-95708 | 2026-10-23 | 7.2 High | ||
| No description provided | ||||
| CVE-2026-95713 | 2026-10-23 | 7 High | ||
| No description provided | ||||
| CVE-2026-95714 | 2026-10-23 | 6.8 Medium | ||
| No description provided | ||||
| CVE-2026-95716 | 2026-10-23 | 6.5 Medium | ||
| No description provided | ||||
| CVE-2026-101787 | 1 Oracle | 2 Mysql Cluster, Mysql Server | 2026-10-23 | 4.9 Medium |
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | ||||
| CVE-2026-101795 | 1 Oracle | 2 Mysql Cluster, Mysql Server | 2026-10-23 | 6.7 Medium |
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-101796 | 1 Oracle | 2 Mysql Cluster, Mysql Server | 2026-10-23 | 7.5 High |
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-79846 | 2026-10-23 | 10 Critical | ||
| No description provided | ||||
| CVE-2026-79852 | 2026-10-23 | 9.8 Critical | ||
| No description provided | ||||
| CVE-2026-79853 | 2026-10-23 | 9.8 Critical | ||
| No description provided | ||||
| CVE-2026-79872 | 2026-10-23 | 9.4 Critical | ||
| No description provided | ||||
| CVE-2026-79877 | 2026-10-23 | 8.8 High | ||
| No description provided | ||||
| CVE-2026-79880 | 2026-10-23 | 8.7 High | ||
| No description provided | ||||
| CVE-2026-114647 | 1 Mongodb | 1 C# Driver | 2026-10-23 | 4.3 Medium |
| The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar sign in FindOneAndReplace, unlike other replace operations. An application that builds such a document from user-supplied field names can have the server apply update operators instead of a full replacement. The effect is limited to the document matched by the application's own filter, whose contents can be modified in ways the application did not intend. | ||||
| CVE-2026-114649 | 1 Mongodb | 1 C# Driver | 2026-10-23 | 6.8 Medium |
| The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creates clients from certificates supplied by different users, a user who provides a certificate copying another user's issuer and serial number, without that user's private key, can be given connections authenticated with the other user's certificate. Database operations can then run under the other user's identity, affecting the confidentiality and integrity of data that identity can access. | ||||
| CVE-2026-114654 | 1 Mongodb | 1 C# Driver | 2026-10-23 | 6.5 Medium |
| A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range binary subtype value supplied through untrusted textual input to bypass the library's binary-element integrity checks. When such a value is later encoded, it is narrowed to a smaller wire representation, producing binary elements that misdeclare their type or length. An unauthenticated party able to supply text parsed by an affected application can cause it to emit and persist malformed binary data, which subsequent readers either reject with an error or silently interpret as shorter than the data that was validated. | ||||
| CVE-2026-115398 | 2 Nationalsecurityagency, Nsa | 2 Ghidra, Ghidra | 2026-10-23 | 5.5 Medium |
| Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to exhaust the Java heap and hang the session. | ||||