Export limit exceeded: 424863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424863 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-58680 | 2026-11-10 | N/A | ||
| In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check failure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-125125 | 2026-11-10 | N/A | ||
| compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From version 0.30.0 until 0.32.0, the compose-lint GitHub Action prints the resolved directory from a failed sarif-file subdirectory creation without effective command suppression. Version 0.30.0 has no stop-commands window, while version 0.31.0 prints this error outside its stop-commands window. A pull request can place a committed symlink on that path to a directory whose name contains a newline followed by a workflow command, causing the SARIF-directory error to issue commands in the job log. Only the Action with sarif-file pointing into a subdirectory is affected; a workspace-root SARIF file, the compose-lint package, the pre-commit hook, and the Docker image do not expose this message. This issue is fixed in version 0.32.0. | ||||
| CVE-2026-125115 | 2026-11-10 | 6.8 Medium | ||
| Novu provides an API for sending notifications through multiple channels. Prior to 3.17.0, validateUrlSsrf in libs/application-generic/src/utils/ssrf-url-validation.ts uses the isPrivateIp deny-list without covering the RFC6598 100.64.0.0/10 shared address space or its IPv4-mapped IPv6 forms. The workflow HTTP request step and webhook filter condition can therefore send server-side requests when a configured literal address or resolved hostname falls in that range. In Alibaba Cloud, 100.100.100.200 may expose instance metadata, while self-hosted and multi-tenant deployments may expose provider-internal services, private infrastructure, service meshes, or VPN resources reachable through CGNAT addressing. This issue is fixed in version 3.17.0. | ||||
| CVE-2026-125105 | 1 Wagtail | 1 Wagtail | 2026-11-10 | 3.7 Low |
| Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, Wagtail applies ETag conditional request processing to the document serve endpoint before document permission and filename checks complete. An unauthenticated attacker who knows a document ID and a candidate SHA1 hash can submit If-Match or If-None-Match and distinguish the response, revealing whether that hash is present in the document library. The issue does not expose document contents, filenames, other metadata, or information about hashes the attacker does not already know. This issue is fixed in versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2. | ||||
| CVE-2026-125041 | 2 Red Hat, Redhat | 3 Enterprise Linux, Enterprise Linux, Rhel Els | 2026-11-10 | 5.5 Medium |
| A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the sample is copied, potentially crashing the application and causing denial of service. | ||||
| CVE-2026-124992 | 1 Nushell | 1 Nushell | 2026-11-10 | 3.3 Low |
| A vulnerability was identified in nushell up to 0.116.1. Impacted is the function escape_bytes of the file crates/nu-json/src/ser.rs of the component Data Conversion Handler. The manipulation leads to improper neutralization of escape, meta, or control sequences. The attack must be carried out locally. The pull request to fix this issue awaits acceptance. | ||||
| CVE-2026-124950 | 2026-11-10 | 3.4 Low | ||
| Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124949 | 2026-11-10 | 3.4 Low | ||
| Other issue in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124947 | 2026-11-10 | 8.8 High | ||
| Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124946 | 2026-11-10 | 3.4 Low | ||
| Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124945 | 2026-11-10 | 3.4 Low | ||
| Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124944 | 2026-11-10 | 4.3 Medium | ||
| Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124943 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124936 | 2026-11-10 | 3.4 Low | ||
| Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124928 | 2026-11-10 | 6.1 Medium | ||
| Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124925 | 2026-11-10 | 4.3 Medium | ||
| Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124923 | 2026-11-10 | 6.1 Medium | ||
| Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124921 | 2026-11-10 | 6.1 Medium | ||
| Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124920 | 2026-11-10 | 6.1 Medium | ||
| Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124908 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||