CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-106616 HIGH · 8.6 ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could…
- CVE-2026-106615 HIGH · 8.8 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…
- CVE-2026-106614 HIGH · 7.8 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…
- CVE-2026-106613 HIGH · 8.8 ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged…
- CVE-2026-106612 CRITICAL · 9.9 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…
- CVE-2026-106090 HIGH · 8.8 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…
- CVE-2026-106089 HIGH · 8.8 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…
- CVE-2026-105994 HIGH · 7.7 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass…
- CVE-2026-105903 CRITICAL · 9.9 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of…
- CVE-2026-105901 HIGH · 8.8 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…
- CVE-2026-105900 HIGH · 7.5 ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…
- CVE-2026-105899 CRITICAL · 10.0 ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the…
- CVE-2026-105898 HIGH · 8.2 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker…
- CVE-2026-105897 HIGH · 8.6 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction.…
- CVE-2026-105896 MEDIUM · 5.5 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash…
- CVE-2026-105443 HIGH · 8.2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install.
- CVE-2026-105442 HIGH · 7.5 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause…
- CVE-2026-104587 NONE blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses text/template instead of html/template, failing to perform context-aware auto-escaping on…
- CVE-2026-104348 HIGH · 7.8 Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
- CVE-2026-104347 HIGH · 7.8 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
- CVE-2026-104346 HIGH · 7.8 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
- CVE-2026-103829 MEDIUM · 5.5 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to…
- CVE-2026-103828 MEDIUM · 5.5 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to…
- CVE-2026-103827 MEDIUM · 5.5 Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to…
- CVE-2026-103826 MEDIUM · 5.5 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to…
- CVE-2026-103825 MEDIUM · 5.5 Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
- CVE-2026-103824 MEDIUM · 5.5 Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to…
- CVE-2026-103823 MEDIUM · 5.5 Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to…
- CVE-2026-103822 MEDIUM · 5.5 Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
- CVE-2026-103821 HIGH · 7.8 Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
- CVE-2026-101294 HIGH · 8.7 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic…
- CVE-2026-100131 MEDIUM · 5.5 Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
- CVE-2026-100130 MEDIUM · 5.5 Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
- CVE-2026-100129 HIGH · 7.8 Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
- CVE-2026-100128 HIGH · 7.8 Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
- CVE-2026-100127 HIGH · 7.8 Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
- CVE-2026-100126 MEDIUM · 5.5 Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive…
- CVE-2026-100112 HIGH · 7.8 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
- CVE-2026-100111 HIGH · 7.8 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
- CVE-2026-90532 CRITICAL · 10.0 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially…
- CVE-2026-90531 CRITICAL · 9.6 Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privileged attacker…
- CVE-2026-86022 HIGH · 7.0 VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::start(const…
- CVE-2026-86016 HIGH · 8.2 VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre…
- CVE-2026-83960 MEDIUM · 5.4 Adobe Experience Manager wordt beïnvloed door een op dom gebaseerde XSS-kwetsbaarheid (Cross-Site Scripting). Een aanvaller zou dit probleem kunnen uitbuiten door de dom-omgeving te manipuleren…
- CVE-2026-83958 MEDIUM · 5.4 Adobe Experience Manager wordt beïnvloed door een op dom gebaseerde XSS-kwetsbaarheid (Cross-Site Scripting). Een aanvaller zou dit probleem kunnen uitbuiten door de dom-omgeving te manipuleren…
- CVE-2026-83662 CRITICAL · 9.3 Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web…
- CVE-2026-75732 CRITICAL · 9.9 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially…
- CVE-2026-70098 HIGH · 8.8 Ontbrekende autorisatie in Visual Studio Code stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk.
- CVE-2026-63174 HIGH · 8.1 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authority because…
- CVE-2026-63172 HIGH · 7.1 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts by invoking the user-edit…