Export limit exceeded: 421036 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (421036 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-123325 | 1 Jetbrains | 1 Youtrack | 2026-11-07 | 7.1 High |
| In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page | ||||
| CVE-2026-123311 | 1 Jetbrains | 1 Intellij Idea | 2026-11-07 | 5.3 Medium |
| In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible | ||||
| CVE-2026-123308 | 1 Jetbrains | 1 Intellij Idea | 2026-11-07 | 6.3 Medium |
| In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects | ||||
| CVE-2026-123305 | 1 Jetbrains | 1 Intellij Idea | 2026-11-07 | 7.5 High |
| In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host | ||||
| CVE-2026-123304 | 1 Jetbrains | 1 Intellij Idea | 2026-11-07 | 7.8 High |
| In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path | ||||
| CVE-2026-123302 | 1 Jetbrains | 1 Intellij Idea | 2026-11-07 | 7.8 High |
| In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery | ||||
| CVE-2026-123298 | 1 Jetbrains | 1 Hub | 2026-11-07 | 5 Medium |
| In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible | ||||
| CVE-2026-123296 | 1 Jetbrains | 1 Hub | 2026-11-07 | 7.5 High |
| In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible | ||||
| CVE-2026-123294 | 1 Jetbrains | 1 Hub | 2026-11-07 | 9.6 Critical |
| In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow | ||||
| CVE-2026-123293 | 1 Jetbrains | 1 Intellij Idea | 2026-11-07 | 7.8 High |
| In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting | ||||
| CVE-2026-123278 | 1 Jetbrains | 1 Intellij Idea | 2026-11-07 | 6.7 Medium |
| In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint | ||||
| CVE-2026-123276 | 1 Jetbrains | 1 Clion | 2026-11-07 | 7.8 High |
| In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile | ||||
| CVE-2026-118147 | 1 Microsoft | 5 Microsoft Visual Studio 2017 Version 15.9, Microsoft Visual Studio 2019 Version 16.11, Microsoft Visual Studio 2022 Version 17.14 and 2 more | 2026-11-07 | 7.4 High |
| Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-112670 | 1 Apple | 1 Macos | 2026-11-07 | 7.8 High |
| An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption. | ||||
| CVE-2026-107155 | 1 Sonicwall | 1 Sonicos | 2026-11-07 | 8.8 High |
| A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations. | ||||
| CVE-2023-4535 | 3 Fedoraproject, Opensc Project, Redhat | 4 Fedora, Opensc, Enterprise Linux and 1 more | 2026-11-07 | 4.5 Medium |
| An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security. | ||||
| CVE-2023-39328 | 2 Redhat, Uclouvain | 3 Enterprise Linux, Rhel Els, Openjpeg | 2026-11-07 | 5.5 Medium |
| A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file. | ||||
| CVE-2023-3106 | 3 Fedoraproject, Linux, Redhat | 4 Fedora, Linux Kernel, Enterprise Linux and 1 more | 2026-11-07 | 6.6 Medium |
| A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely. | ||||
| CVE-2023-39198 | 3 Fedoraproject, Linux, Redhat | 4 Fedora, Linux Kernel, Enterprise Linux and 1 more | 2026-11-07 | 7.5 High |
| A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation. | ||||
| CVE-2023-43788 | 3 Fedoraproject, Redhat, X.org | 4 Fedora, Enterprise Linux, Rhel Els and 1 more | 2026-11-07 | 5.5 Medium |
| A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system. | ||||