Export limit exceeded: 387028 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (387028 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-73550 | 2026-08-26 | 7.5 High | ||
| No description is available for this CVE. | ||||
| CVE-2026-73548 | 2026-08-26 | 7.5 High | ||
| No description is available for this CVE. | ||||
| CVE-2026-73546 | 2026-08-26 | 7.4 High | ||
| No description is available for this CVE. | ||||
| CVE-2026-73511 | 2026-08-26 | 5.3 Medium | ||
| No description is available for this CVE. | ||||
| CVE-2026-73553 | 2026-08-26 | 7.5 High | ||
| No description is available for this CVE. | ||||
| CVE-2026-73552 | 2026-08-26 | 7.5 High | ||
| No description is available for this CVE. | ||||
| CVE-2026-73551 | 2026-08-26 | 5.3 Medium | ||
| No description is available for this CVE. | ||||
| CVE-2026-73547 | 2026-08-26 | 7.5 High | ||
| No description is available for this CVE. | ||||
| CVE-2026-73513 | 2026-08-26 | 7.5 High | ||
| No description is available for this CVE. | ||||
| CVE-2026-73512 | 2026-08-26 | 7.5 High | ||
| No description is available for this CVE. | ||||
| CVE-2026-50572 | 2026-08-26 | 5.9 Medium | ||
| No description is available for this CVE. | ||||
| CVE-2026-48521 | 2026-08-26 | 5.9 Medium | ||
| No description is available for this CVE. | ||||
| CVE-2026-73549 | 2026-08-26 | 5.3 Medium | ||
| No description is available for this CVE. | ||||
| CVE-2026-77536 | 2026-08-26 | 9.9 Critical | ||
| A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances. | ||||
| CVE-2026-77537 | 2026-08-26 | 10 Critical | ||
| A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device. | ||||
| CVE-2026-77538 | 2026-08-26 | 8.2 High | ||
| A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application. | ||||
| CVE-2026-77357 | 1 Mesop-dev | 1 Mesop | 2026-08-26 | N/A |
| Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads with high counter values until the worker pool is exhausted and the server becomes unavailable. A single unauthenticated attacker can crash the Mesop server with minimal effort. Because the attack leverages worker exhaustion, the server remains unresponsive until it is manually restarted. This issue is fixed in version 1.3.3. | ||||
| CVE-2026-77539 | 1 Ubiquiti | 1 Unifi Os Server | 2026-08-26 | 9.1 Critical |
| A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device. | ||||
| CVE-2026-77550 | 2026-08-26 | 10 Critical | ||
| A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances. | ||||
| CVE-2026-68514 | 2026-08-26 | 5.5 Medium | ||
| OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings contain a heap out-of-bounds write triggered when reading a crafted deep scanline EXR file. When a deep file declares a literal channel named left alongside layer-prefixed RGB channels left.R, left.G, and left.B, the wrapper processes the literal left channel first and allocates a scalar deep sample array for it, then reuses that same array as the coalesced destination for the prefixed RGB group. The deep reader registers sample slices with an RGB stride (three lanes) into storage that was allocated with scalar shape, so decoding the deep samples writes past the allocation. Opening such a file through the default public Python API, OpenEXR.File(path), causes a heap buffer overflow during normal deep sample decode, leading to memory corruption and a crash. This issue is fixed in versions 3.3.13 and 3.4.14. | ||||