Export limit exceeded: 421002 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 421002 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 421002 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 421002 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (421002 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-34967 | 4 Debian, Fedoraproject, Redhat and 1 more | 8 Debian Linux, Fedora, Enterprise Linux and 5 more | 2026-11-06 | 5.3 Medium |
| A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker process, affecting all other clients this worker serves. | ||||
| CVE-2023-33952 | 2 Linux, Redhat | 6 Linux Kernel, Enterprise Linux, Enterprise Linux For Real Time and 3 more | 2026-11-06 | 6.7 Medium |
| A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel. | ||||
| CVE-2023-33951 | 2 Linux, Redhat | 6 Linux Kernel, Enterprise Linux, Enterprise Linux For Real Time and 3 more | 2026-11-06 | 6.7 Medium |
| A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel. | ||||
| CVE-2023-32256 | 1 Redhat | 2 Enterprise Linux, Rhel Els | 2026-11-06 | 7.5 High |
| A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue. | ||||
| CVE-2024-6387 | 13 Almalinux, Amazon, Apple and 10 more | 86 Almalinux, Amazon Linux, Macos and 83 more | 2026-11-06 | 8.1 High |
| A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period. | ||||
| CVE-2026-123330 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 5.4 Medium |
| In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings | ||||
| CVE-2026-123329 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 5.4 Medium |
| In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions | ||||
| CVE-2026-123331 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 5.4 Medium |
| In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles | ||||
| CVE-2026-123332 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 4.7 Medium |
| In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations | ||||
| CVE-2026-123333 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.8 Low |
| In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints | ||||
| CVE-2026-123335 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.5 Low |
| In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection | ||||
| CVE-2026-123334 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.8 Low |
| In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project | ||||
| CVE-2026-123842 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 7.1 High |
| In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives | ||||
| CVE-2026-123857 | 1 Jetbrains | 1 Phpstorm | 2026-11-06 | 4.3 Medium |
| In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection | ||||
| CVE-2026-123833 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 3.6 Low |
| In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects | ||||
| CVE-2026-123839 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 4.7 Medium |
| In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model | ||||
| CVE-2026-123845 | 1 Jetbrains | 1 Intellij Idea | 2026-11-06 | 3.3 Low |
| In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects | ||||
| CVE-2026-123850 | 1 Jetbrains | 1 Youtrack | 2026-11-06 | 3.5 Low |
| In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives | ||||
| CVE-2026-123856 | 1 Jetbrains | 1 Toolbox | 2026-11-06 | 6.5 Medium |
| In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server | ||||
| CVE-2026-123835 | 1 Jetbrains | 1 Datalore | 2026-11-06 | 5.9 Medium |
| In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition | ||||