Tagged “cve.org”
CVEs tagged cve.org, newest first.
46471 CVEsRSS
CVE-2026-28335High· 8.4SolarWinds Dameware Buffer Overflow Vulnerability
SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.
CVE-2026-121246Critical· 9.6Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-121229Critical· 9.6Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-121203High· 8.8Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-77800High· 7.7Authentication bypass vulnerability
ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.
CVE-2026-13594Critical· 9.1Improper Access Control vulnerability
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.
CVE-2026-92196High· 7.20dayQuest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability
Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Da…
CVE-2026-92200High· 7.80dayQuest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An attacke…
CVE-2026-92199High· 7.80dayQuest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability
Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Quest Foglight for Databases. An …
CVE-2026-92198High· 8.20dayQuest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability
Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Quest Foglight…
CVE-2026-92185High· 7.20dayQuest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability
Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for…
CVE-2026-92191High· 8.80dayQuest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability
Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentic…
CVE-2026-92189Critical· 9.80dayQuest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability
Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight f…
CVE-2026-92197High· 8.80dayQuest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authenticatio…
CVE-2026-92186High· 8.80dayQuest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databa…
CVE-2026-92195High· 8.80dayQuest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authe…
CVE-2026-92194High· 8.80dayQuest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases.…
CVE-2026-92192High· 8.80dayQuest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authenti…
CVE-2026-92193Medium· 6.50dayQuest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability
Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Dat…
CVE-2026-92188Critical· 9.80dayQuest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability
Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databas…
CVE-2026-92190Critical· 9.80dayQuest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability
Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight f…
CVE-2026-92187High· 8.80dayQuest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability
Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Dat…
CVE-2026-92211High· 7.80dayPixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability
Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio OpenUSD. Interact…
CVE-2026-120650NoneCGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits
CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits. $CGI::POST_MAX defaults to no limit, and when set is not enforced for chunked multipart bodies …
CVE-2026-114552Medium· 6.50dayMailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability
MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is r…
CVE-2026-114551Medium· 5.90dayMailEnable Auth Cleartext Storage Information Disclosure Vulnerability
MailEnable Auth Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MailEnable. Authentication is not required to exploit this …
CVE-2026-120641NoneCGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths
CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The name returned for an uploaded file is the filename parameter of the part's Content-Disposition header, unchang…
CVE-2026-114550High· 8.10dayPoClibwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication i…
CVE-2026-121589Medium· 5.3spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion
A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the file AbstractUrlSigner.php of the component URL Validation. This manipulation of the argument expires causes inc…
CVE-2026-118628High· 8.20dayMLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is not required to ex…