Export limit exceeded: 10628 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (10628 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-119336 | 1 Pi-hole | 1 Pi-hole | 2026-10-30 | 7.8 High |
| Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the root-run advanced/Scripts/updatecheck.sh cron job applies truncate -s 0 and chmod 644 to /etc/pihole/versions while following symbolic links in a directory owned by the pihole user. An attacker executing as pihole can replace that path with a symlink so the scheduled root operations truncate or create an arbitrary root-owned file, or race the operations so chmod makes a sensitive target world-readable without truncating it. This issue is fixed in version 6.5. | ||||
| CVE-2026-64918 | 1 Microsoft | 5 365 Apps, Office 2016, Office 2019 and 2 more | 2026-10-30 | 6.5 Medium |
| Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-116250 | 1 Pgadmin | 1 Pgadmin 4 | 2026-10-30 | 6.5 Medium |
| In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() and then opened it by name. Several places opened it with a plain open() or handed the path to a utility that opened it later: the servers.json export and import and the import file listing, and the files given to pg_dump, pg_dumpall, pg_restore and psql by Backup, Restore and Import/Export Data. A symbolic link swapped in at the file or at any parent directory between the check and the open redirected the operation outside the storage directory, so a file could be written, overwritten or read, or loaded into a table, as the operating-system account running pgAdmin. A hard link to an outside file, which O_NOFOLLOW does not detect, and a FIFO, which could hang a request, had the same effect. CVE-2026-86861 fixed this for the File Manager's save_file; these were the remaining paths. Exploitation requires creating such a link or FIFO inside the user's storage directory. pgAdmin offers no way to do so, and the per-user storage directories belong to the pgAdmin account, so this requires write access to the storage backend as a different operating-system user, for example a shared or network-mounted storage directory, and winning the race. The fix opens each file by walking down from the storage directory one component at a time with O_NOFOLLOW, accepting only a regular file with one link, and passes the utilities the open descriptor (/dev/fd/N) on Linux. Error messages no longer include the server path. This issue affects pgAdmin 4: before 9.19. | ||||
| CVE-2026-118089 | 2026-10-30 | 7.2 High | ||
| Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions. | ||||
| CVE-2026-118090 | 2026-10-30 | 8.8 High | ||
| Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions. | ||||
| CVE-2026-62131 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. | ||||
| CVE-2026-62016 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | ||||
| CVE-2026-62015 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. | ||||
| CVE-2026-62014 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions. | ||||
| CVE-2026-62011 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. | ||||
| CVE-2026-62010 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. | ||||
| CVE-2026-62009 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. | ||||
| CVE-2026-62005 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. | ||||
| CVE-2026-62004 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. | ||||
| CVE-2026-62003 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Mission <= 1.22 versions. | ||||
| CVE-2026-61998 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. | ||||
| CVE-2026-61997 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions. | ||||
| CVE-2026-61992 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. | ||||
| CVE-2026-54860 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions. | ||||
| CVE-2026-54857 | 2026-10-30 | 9.8 Critical | ||
| Unauthenticated PHP Object Injection in Quirky <= 1.23 versions. | ||||