Tagged “cve.org”
CVEs tagged cve.org, newest first.
38031 CVEsRSS
CVE-2026-57188High· 7.1Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in …
CVE-2026-57202High· 8.1Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated Asterisk REST Interface (ARI) attacker with re…
CVE-2026-117516High· 7.3oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/…
CVE-2026-116658Medium· 6.5Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
CVE-2026-87085Medium· 6.5Tanium addressed a SQL injection vulnerability in Provision.
Tanium addressed a SQL injection vulnerability in Provision.
CVE-2026-108308Medium· 6.5Tanium addressed a SQL injection vulnerability in Patch.
Tanium addressed a SQL injection vulnerability in Patch.
CVE-2026-116662High· 7.5Tanium addressed a compression bomb vulnerability in Enforce.
Tanium addressed a compression bomb vulnerability in Enforce.
CVE-2026-108331Low· 3.3Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
CVE-2026-108305High· 7.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108310Medium· 5.3Tanium addressed a denial of service vulnerability in Tanium Server.
Tanium addressed a denial of service vulnerability in Tanium Server.
CVE-2026-116679Medium· 5.4Neko: Authorization bypass in legacy WebRTC input handling
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input be…
CVE-2026-108307High· 7.8Tanium addressed a heap-based buffer overflow vulnerability in Index.
Tanium addressed a heap-based buffer overflow vulnerability in Index.
CVE-2026-108333Low· 2.5Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
CVE-2026-116657Medium· 5.3Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
CVE-2026-108330Low· 3.6Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
CVE-2026-108326Medium· 6.5Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
CVE-2026-116649High· 7.1Tanium addressed an improper output sanitization vulnerability in Enforce.
Tanium addressed an improper output sanitization vulnerability in Enforce.
CVE-2026-116647High· 7.1Tanium addressed an improper output sanitization vulnerability in Comply.
Tanium addressed an improper output sanitization vulnerability in Comply.
CVE-2026-116660Medium· 4.3Tanium addressed an improper access controls vulnerability in Enforce.
Tanium addressed an improper access controls vulnerability in Enforce.
CVE-2026-108313Medium· 6.6Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
CVE-2026-87086High· 7.5Tanium addressed a denial of service vulnerability in Provision.
Tanium addressed a denial of service vulnerability in Provision.
CVE-2026-108329High· 8.8Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
CVE-2026-108309Medium· 5.5Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
CVE-2026-108304High· 7.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108332Medium· 6.3Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
CVE-2026-108301Medium· 6.0Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-102812Medium· 6.9Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management comp…
CVE-2026-108306High· 7.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108302Medium· 4.3Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-108325Medium· 6.6Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.