Export limit exceeded: 26450 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (26450 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-55211 1 Equinor 1 Surfio 2026-09-17 N/A
Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a web service. This issue is fixed in version 0.0.19.
CVE-2026-67643 1 Microsoft 6 Microsoft Sql Server 2022 (cu 26), Microsoft Sql Server 2022 (gdr), Microsoft Sql Server 2025 (cu8) and 3 more 2026-09-17 9.8 Critical
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67636 1 Microsoft 3 Sql Server 2019, Sql Server 2022, Sql Server 2025 2026-09-17 9 Critical
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69739 1 Microsoft 8 365 Apps, Office 2016, Office 2019 and 5 more 2026-09-17 6.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-67631 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-17 9.8 Critical
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-76695 1 Hewlett Packard Enterprise (hpe) 1 Edgeconnect Sd-wan Gateways 2026-09-17 6.5 Medium
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the integrity and availability of the affected service.
CVE-2026-76705 1 Hewlett Packard Enterprise (hpe) 1 Edgeconnect Sd-wan Gateways 2026-09-17 5.5 Medium
A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system.
CVE-2026-76860 1 Netcore 1 Nr255-v 2026-09-17 8.8 High
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory.
CVE-2026-76870 1 Netcore 1 Nr255-v 2026-09-17 7.1 High
Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd_write pre-flash validation routine triggered by short firmware uploads. Attackers can upload a truncated firmware image via put_file_cgi.c to trigger out-of-bounds reads across main.c, check_image_uuid.c, and oemMD5Update.c.
CVE-2026-38332 1 Cdcseacave 1 Tinyexif 2026-09-17 2.9 Low
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.
CVE-2023-24283 1 Simon Tatham 1 Portable Puzzle Collection 2026-09-17 2.9 Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted save file.
CVE-2023-24284 1 Simon Tatham 1 Portable Puzzle Collection 2026-09-17 2.9 Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function.
CVE-2023-24285 1 Simon Tatham 1 Portable Puzzle Collection 2026-09-17 2.9 Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed.
CVE-2023-24286 1 Simon Tatham 1 Portable Puzzle Collection 2026-09-17 2.9 Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter.
CVE-2023-24287 1 Simon Tatham 1 Portable Puzzle Collection 2026-09-17 2.9 Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command.
CVE-2023-24291 1 Simon Tatham 1 Portable Puzzle Collection 2026-09-17 2.9 Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter.
CVE-2026-16726 1 Panasonic 4 Panaterm For Multi, Panaterm V6, Panaterm V7 and 1 more 2026-09-17 N/A
Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows  attackers  to stop Windows.
CVE-2026-82770 1 Contec 4 Rp-wah-sr1, Rp-wah-sr12, Rp-wah-sr2 and 1 more 2026-09-17 8.8 High
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.
CVE-2026-82785 1 Contec 1 Remote I/o Coupler Unit (server Type) Cpsn-mcb271-* 2026-09-17 4.3 Medium
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.
CVE-2026-90891 1 Asrock 2 Asrock Polychrome Sync/rgb For Mb, Asrock Polychrome Sync/rgb For Vga 2026-09-17 5.5 Medium
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboot.