Export limit exceeded: 100682 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (100682 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-88806 | 1 X.org | 1 Libx11 | 2026-09-22 | 7.5 High |
| A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map. | ||||
| CVE-2026-65128 | 1 Nvidia | 1 Infrastructure Controller | 2026-09-22 | 8.8 High |
| NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure. | ||||
| CVE-2026-94640 | 1 Redhat | 3 Enterprise Linux, Openshift, Openshift Container Platform | 2026-09-22 | 7.5 High |
| A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to persistent memory growth and increased CPU usage. This can degrade or exhaust service availability. | ||||
| CVE-2026-65111 | 1 Nvidia | 1 Nemo Speech | 2026-09-22 | 7.8 High |
| NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering. | ||||
| CVE-2026-95508 | 1 Redhat | 3 Enterprise Linux, Openshift, Openshift Container Platform | 2026-09-22 | 7.4 High |
| A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting in denial of service and potentially arbitrary code execution in the host process. The default interface MTU is not affected. | ||||
| CVE-2026-65179 | 1 Nvidia | 1 Nemo Speech | 2026-09-22 | 8.8 High |
| NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load() without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure. | ||||
| CVE-2026-65121 | 1 Nvidia | 1 Infrastructure Controller | 2026-09-22 | 8.2 High |
| NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering. | ||||
| CVE-2026-65114 | 1 Nvidia | 1 Infrastructure Controller | 2026-09-22 | 8.3 High |
| NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure. | ||||
| CVE-2026-25265 | 1 Qualcomm | 1 Snapdragon | 2026-09-22 | 8.8 High |
| Privilege escalation due to weak configuration while temporary file handling. | ||||
| CVE-2026-24239 | 1 Nvidia | 1 Nemo Speech | 2026-09-22 | 7.8 High |
| NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering. | ||||
| CVE-2026-65118 | 1 Nvidia | 1 Infrastructure Controller | 2026-09-22 | 7.5 High |
| NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service. | ||||
| CVE-2026-15801 | 1 Redhat | 2 Openshift, Openshift Container Platform | 2026-09-22 | 8 High |
| A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host filesystem. Successful exploitation requires that container checkpoint and restore functionality is enabled, which is not the default configuration. An attacker must also be able to trigger restoration of a container from untrusted checkpoint content. | ||||
| CVE-2026-13087 | 1 Redhat | 3 Enterprise Linux, Enterprise Linux For Nvidia 26, Enterprise Linux Nvidia | 2026-09-22 | 8.8 High |
| A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svc_rdma_sendto.c. When a crafted RPC-over-RDMA client sends a large NFS READ request with an empty Write list and no Reply chunk, the server linearizes the entire multi-page reply into a fixed-size 4096-byte heap buffer without bounds checking, resulting in a kernel heap overflow. This can lead to denial of service via kernel crash or potential code execution through corruption of adjacent kernel heap objects. | ||||
| CVE-2026-24267 | 1 Nvidia | 1 Nemo Speech | 2026-09-22 | 7.8 High |
| NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. | ||||
| CVE-2026-25275 | 1 Qualcomm | 753 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Aqt1000 and 750 more | 2026-09-22 | 7.5 High |
| Transient DOS when processing authentication frames with invalid FILS information element header lengths. | ||||
| CVE-2026-24075 | 1 Qualcomm | 87 Aqt1000, Aqt1000 Firmware, Cologne and 84 more | 2026-09-22 | 7.8 High |
| Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. | ||||
| CVE-2025-59607 | 1 Qualcomm | 29 Cologne, Cologne Firmware, Fastconnect 6900 and 26 more | 2026-09-22 | 7.8 High |
| Memory Corruption when copying large input data exceeds normal allocation limits. | ||||
| CVE-2026-24073 | 1 Qualcomm | 29 Cologne, Cologne Firmware, Fastconnect 6900 and 26 more | 2026-09-22 | 7.8 High |
| Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. | ||||
| CVE-2026-24074 | 1 Qualcomm | 51 Cologne, Cologne Firmware, Fastconnect 6200 and 48 more | 2026-09-22 | 7.8 High |
| Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. | ||||
| CVE-2025-56565 | 2026-09-22 | 7.6 High | ||
| DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An attacker with physical access to the device can extract these credentials from an SPI flash dump, leading to device compromise, infiltration of the connected network and unauthorised access to dependent third-party services. | ||||