CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-114598 HIGH · 7.5 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read…
- CVE-2026-114597 HIGH · 7.5 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read…
- CVE-2026-114596 HIGH · 8.2 In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an…
- CVE-2026-114595 CRITICAL · 9.8 In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent…
- CVE-2026-109090 HIGH · 7.5 A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.
- CVE-2026-109089 HIGH · 7.5 A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
- CVE-2026-109088 MEDIUM · 6.5 A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless…
- CVE-2026-108142 NONE A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
- CVE-2026-108141 NONE A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files…
- CVE-2026-108140 NONE A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files…
- CVE-2026-108015 NONE Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes…
- CVE-2026-108014 NONE Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino…
- CVE-2026-107671 NONE A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.
- CVE-2026-106078 NONE A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do…
- CVE-2026-106077 NONE A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.
- CVE-2026-106076 NONE A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to…
- CVE-2026-105477 NONE A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are…
- CVE-2026-102638 HIGH · 7.1 A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the library is imported,…
- CVE-2026-102637 HIGH · 7.1 A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger…
- CVE-2026-102636 HIGH · 7.1 A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting (XSS)…
- CVE-2025-64394 NONE A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can…
- CVE-2026-93866 NONE An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the…
- CVE-2026-93434 NONE An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract…
- CVE-2026-92377 HIGH · 7.8 Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated…
- CVE-2026-92376 HIGH · 7.8 Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with…
- CVE-2026-92375 HIGH · 7.8 An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component…
- CVE-2026-92374 HIGH · 7.8 A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version…
- CVE-2026-92372 HIGH · 8.8 An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to…
- CVE-2026-90464 NONE An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device…
- CVE-2026-90442 NONE A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the…
- CVE-2026-82332 NONE An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress…
- CVE-2026-115495 NONE Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic…
- CVE-2026-113881 NONE A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service…
- CVE-2026-112710 NONE A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory…
- CVE-2026-112709 NONE A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server…
- CVE-2026-111585 HIGH · 8.8 An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow…
- CVE-2026-111584 HIGH · 7.3 A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker…
- CVE-2026-111583 HIGH · 7.3 Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced…
- CVE-2026-111582 HIGH · 7.3 A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges…
- CVE-2026-111107 NONE A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash…
- CVE-2026-109823 NONE An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response…
- CVE-2026-104381 NONE A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature…
- CVE-2026-103594 NONE A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard…
- CVE-2026-105987 NONE KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary…
- CVE-2026-118026 HIGH · 8.8 Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
- CVE-2026-118025 HIGH · 8.8 Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
- CVE-2026-118024 HIGH · 8.8 Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
- CVE-2026-118023 HIGH · 8.8 Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
- CVE-2026-16307 MEDIUM · 4.3 Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.
- CVE-2026-12887 NONE In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the…