Export limit exceeded: 415509 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415509 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415509 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415509 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415509 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 415509 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (415509 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-108310 | 1 Tanium | 1 Tanium Server | 2026-10-27 | 5.3 Medium |
| Tanium addressed a denial of service vulnerability in Tanium Server. | ||||
| CVE-2026-108313 | 1 Tanium | 1 Tanium Server | 2026-10-27 | 6.6 Medium |
| Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. | ||||
| CVE-2026-108301 | 1 Tanium | 1 Comply | 2026-10-27 | 6 Medium |
| Tanium addressed an improper access controls vulnerability in Comply. | ||||
| CVE-2026-108329 | 1 Tanium | 1 Threat Response | 2026-10-27 | 8.8 High |
| Tanium addressed an unauthorized code execution vulnerability in Threat Response. | ||||
| CVE-2026-108306 | 1 Tanium | 2 End-user-cx, Endpoint Configuration Toolset Solution | 2026-10-27 | 7.8 High |
| Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | ||||
| CVE-2026-108302 | 1 Tanium | 1 Comply | 2026-10-27 | 4.3 Medium |
| Tanium addressed an improper access controls vulnerability in Comply. | ||||
| CVE-2026-104351 | 1 Adobe | 1 Campaign Classic | 2026-10-27 | 9.9 Critical |
| Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-105781 | 1 Adobe | 1 Campaign Classic | 2026-10-27 | 10 Critical |
| Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-105489 | 1 Adobe | 1 Campaign Classic | 2026-10-27 | 9.9 Critical |
| Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-108305 | 1 Tanium | 2 End-user-cx, Endpoint Configuration Toolset Solution | 2026-10-27 | 7.8 High |
| Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | ||||
| CVE-2026-108325 | 1 Tanium | 1 Reputation | 2026-10-27 | 6.6 Medium |
| Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. | ||||
| CVE-2026-108316 | 1 Tanium | 1 Tanium Server | 2026-10-27 | 4.3 Medium |
| Tanium addressed an information disclosure vulnerability in Tanium Server. | ||||
| CVE-2026-108311 | 1 Tanium | 1 Tanium Server | 2026-10-27 | 2.7 Low |
| Tanium addressed an insufficient logging vulnerability in Tanium Server. | ||||
| CVE-2026-105008 | 1 Microsoft | 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more | 2026-10-27 | 9 Critical |
| No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-102675 | 2 Electron, Electronjs | 2 Electron, Electron | 2026-10-27 | 7.4 High |
| Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, responses served through protocol.registerFileProtocol or protocol.registerHttpProtocol for a custom scheme registered with supportFetchAPI enabled but corsEnabled disabled could remain script-readable across origins. This residual issue completes the remediation for CVE-2026-70604. Applications are affected only when they expose such a scheme and load untrusted content in the same session. Schemes intentionally registered with corsEnabled enabled remain cross-origin readable by design. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5. | ||||
| CVE-2026-113869 | 1 Mozilla | 1 Thunderbird | 2026-10-27 | 5.4 Medium |
| When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free and a potentially exploitable crash. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.6. | ||||
| CVE-2026-117995 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | ||||
| CVE-2026-117993 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | ||||
| CVE-2026-117982 | 1 Mozilla | 1 Firefox | 2026-10-27 | N/A |
| Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | ||||
| CVE-2026-78845 | 2026-10-27 | N/A | ||
| Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing. | ||||