Export limit exceeded: 419506 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (419506 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2011-1594 | 1 Redhat | 3 Network Satellite, Rhel Els, Spacewalk | 2026-11-05 | 6.5 Medium |
| A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft. | ||||
| CVE-2026-122188 | 1 Deepgraphlearning | 1 Knowledgegraphembedding | 2026-11-05 | 6.3 Medium |
| A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d5ff67ead68ce985dc446e3a. Impacted is the function override_config of the file codes/run.py of the component Checkpoint Loading. This manipulation of the argument data_path causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet. | ||||
| CVE-2026-78410 | 2 Linux, Redhat | 8 Util-linux, Cost Management On Premise, Enterprise Linux and 5 more | 2026-11-05 | 7.8 High |
| A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode. | ||||
| CVE-2026-78408 | 2 Linux, Redhat | 8 Util-linux, Cost Management On Premise, Enterprise Linux and 5 more | 2026-11-05 | 7.9 High |
| The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes. | ||||
| CVE-2026-48173 | 2026-11-05 | N/A | ||
| In the NAS message handler, improper validation of the length field in NAS message causes memory corruption | ||||
| CVE-2026-48174 | 2026-11-05 | N/A | ||
| In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | ||||
| CVE-2026-35494 | 2026-11-05 | N/A | ||
| In the baseband, memory corruption during NAS packet processing can cause a denial of service. | ||||
| CVE-2026-48175 | 2026-11-05 | N/A | ||
| Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. | ||||
| CVE-2026-48178 | 2026-11-05 | N/A | ||
| Out of bound access in PPC due to race condition in global variable access | ||||
| CVE-2026-48186 | 2026-11-05 | N/A | ||
| Improper handling of messages before AS security activation can cause unexpected behavior | ||||
| CVE-2026-68993 | 2026-11-05 | N/A | ||
| A double free vulnerability in NPU driver due to improper pointer management (940) | ||||
| CVE-2026-68994 | 2026-11-05 | N/A | ||
| A double free vulnerability in NPU driver due to improper pointer management (941) | ||||
| CVE-2026-48183 | 2026-11-05 | N/A | ||
| Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions | ||||
| CVE-2026-68984 | 2026-11-05 | N/A | ||
| In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. | ||||
| CVE-2026-69005 | 2026-11-05 | N/A | ||
| Integer overflow in NPU driver parameter processing due to insufficient bounds checking. | ||||
| CVE-2026-68985 | 2026-11-05 | N/A | ||
| In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service. | ||||
| CVE-2026-69006 | 2026-11-05 | N/A | ||
| Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. | ||||
| CVE-2026-69068 | 2026-11-05 | N/A | ||
| Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. | ||||
| CVE-2026-69025 | 2026-11-05 | N/A | ||
| In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service | ||||
| CVE-2026-114406 | 1 Redhat | 26 Advanced Cluster Security, Agentic Cluster Security Suite, Ai Inference Server and 23 more | 2026-11-05 | 6.8 Medium |
| The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed. | ||||