Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424751 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-126815 | 1 Xauendevs | 1 Lagarto Chivato | 2026-11-11 | 8.1 High |
| Pre-account hijacking in the authentication flow in Lagarto Chivato 0.4.1 and earlier on Web allows remote unauthenticated attackers to take over arbitrary accounts via a password planted on an unregistered email address that becomes valid upon the victim’s first passwordless login. | ||||
| CVE-2025-4748 | 1 Erlang | 2 Erlang\/otp, Otp | 2026-11-11 | N/A |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 before OTP 26.2.5.13, OTP 27.3.4.1, and OTP 28.0.1, corresponding to stdlib from 2.0 before 5.2.3.4, 6.2.2.1, and 7.0.1. | ||||
| CVE-2026-0323 | 1 Palo Alto Networks | 1 Checkov By Prisma Cloud | 2026-11-11 | N/A |
| A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services. | ||||
| CVE-2026-0324 | 1 Opswat | 1 Metadefender Endpoint Security Sdk | 2026-11-11 | N/A |
| An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. | ||||
| CVE-2026-118220 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 7.8 High |
| Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-118149 | 1 Microsoft | 1 Exchange Server Se | 2026-11-11 | 8.8 High |
| Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-118150 | 1 Microsoft | 1 Exchange Server Se | 2026-11-11 | 8.8 High |
| Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-118153 | 1 Microsoft | 1 Exchange Server Se | 2026-11-11 | 7.5 High |
| Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-118157 | 1 Microsoft | 1 Exchange Server Se | 2026-11-11 | 7.2 High |
| Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-118207 | 1 Microsoft | 1 Exchange Server Se | 2026-11-11 | 8.8 High |
| Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-118208 | 1 Microsoft | 1 Exchange Server Se | 2026-11-11 | 7.1 High |
| Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-116938 | 1 Microsoft | 7 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 4 more | 2026-11-11 | 7.5 High |
| Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-116941 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-118102 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-11 | 5.9 Medium |
| Use of a broken or risky cryptographic algorithm in SQL Server allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-118108 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-11 | 7.5 High |
| Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-118110 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-11 | 8.8 High |
| Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-118111 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-11 | 8 High |
| Origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-118115 | 1 Microsoft | 6 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Sql Server 2017 and 3 more | 2026-11-11 | 7.5 High |
| Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-118116 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-11 | 7 High |
| Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-118117 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-11 | 8 High |
| Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||