WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-119✕
Overview 14,608 matches · 29 in Waratek scope · 1 protected · 199 exploited · 59 CISA KEV · 1,887 public PoC · 364 EPSS ≥ 0.5
14,608matches 29in Waratek scope0.2% 1protected0.0% 199exploited1.4% 59CISA KEV0.4% 1,887public PoC12.9% 364EPSS ≥ 0.52.5%
Protected by Waratek 1 0.0% Rule in development 0 0.0% Mitigation candidate 3 0.0% No exploit published 25 0.2% Outside Waratek scope 114 0.8% Not applicable 14,458 99.0% Withdrawn CVE 7 0.0%
Critical 1,457 10.0% High 9,567 65.5% Medium 3,110 21.3% Low 467 3.2% None 0 0.0% Unknown 7 0.0%
blocked by ARMR today 1 0.0% partly blocked 0 0.0% not blocked 14,607 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 199 1.4% Working exploit published 1,736 11.9% Proof of concept only 1,771 12.1% Forecast only 28 0.2% No public exploit 10,874 74.4%
split by peak 2,115 / year
Withdrawn CVE: 7Not applicable: 14,458Outside Waratek scope: 114No exploit published: 25Mitigation candidate: 3Protected by Waratek: 1 Unknown: 7Low: 467Medium: 3,110High: 9,567Critical: 1,457 not blocked: 14,607blocked by ARMR today: 1 No public exploit: 10,874Forecast only: 28Proof of concept only: 1,771Working exploit published: 1,736Exploited: 199
19971 Not applicable1 High1 not blocked1 Working exploit published1 19983 Not applicable3 High3 not blocked3 Working exploit published2 No public exploit1 19996 Not applicable6 Critical1 High4 Medium1 not blocked6 Working exploit published3 No public exploit3 20001 Not applicable1 High1 not blocked1 No public exploit1 20019 Not applicable9 High7 Medium2 not blocked9 Working exploit published4 No public exploit5 200241 Mitigation candidate1 Not applicable40 High31 Medium10 not blocked41 Exploited1 Working exploit published14 No public exploit26 200352 Outside Waratek scope3 Not applicable49 High31 Medium21 not blocked52 Working exploit published20 No public exploit32 200423 Not applicable23 High16 Medium6 Low1 not blocked23 Working exploit published8 No public exploit15 200571 No exploit published1 Not applicable70 High45 Medium24 Low2 not blocked71 Exploited1 Working exploit published14 No public exploit56 2006144 Outside Waratek scope1 Not applicable143 High94 Medium47 Low3 not blocked144 Exploited6 Working exploit published57 No public exploit81 2007436 No exploit published1 Outside Waratek scope9 Not applicable419 Withdrawn CVE7 High284 Medium144 Low1 Unknown7 not blocked436 Exploited20 Working exploit published153 Proof of concept only1 Forecast only2 No public exploit260 2008554 Outside Waratek scope11 Not applicable543 Critical2 High429 Medium120 Low3 not blocked554 Exploited8 Working exploit published214 Forecast only4 No public exploit328 2009549 Mitigation candidate2 No exploit published5 Outside Waratek scope5 Not applicable537 High453 Medium95 Low1 not blocked549 Exploited9 Working exploit published237 Proof of concept only1 No public exploit302 2010505 No exploit published1 Not applicable504 Critical2 High387 Medium113 Low3 not blocked505 Exploited8 Working exploit published128 Forecast only2 No public exploit367 2011579 No exploit published1 Not applicable578 Critical1 High480 Medium94 Low4 not blocked579 Exploited8 Working exploit published93 No public exploit478 2012682 Outside Waratek scope1 Not applicable681 Critical2 High479 Medium186 Low15 not blocked682 Exploited4 Working exploit published114 Proof of concept only1 No public exploit563 2013730 No exploit published2 Outside Waratek scope8 Not applicable720 High422 Medium293 Low15 not blocked730 Exploited9 Working exploit published73 Proof of concept only1 Forecast only2 No public exploit645 2014742 No exploit published1 Outside Waratek scope2 Not applicable739 Critical1 High475 Medium251 Low15 not blocked742 Exploited13 Working exploit published116 Proof of concept only3 Forecast only1 No public exploit609 2015963 No exploit published1 Outside Waratek scope2 Not applicable960 Critical8 High591 Medium359 Low5 not blocked963 Exploited8 Working exploit published77 Proof of concept only2 Forecast only7 No public exploit869 20161,036 Protected by Waratek1 Outside Waratek scope6 Not applicable1,029 Critical309 High588 Medium134 Low5 blocked by ARMR today1 not blocked1,035 Exploited18 Working exploit published84 Proof of concept only6 Forecast only5 No public exploit923 20172,115 No exploit published3 Outside Waratek scope10 Not applicable2,102 Critical344 High1,523 Medium243 Low5 not blocked2,115 Exploited32 Working exploit published235 Proof of concept only5 Forecast only1 No public exploit1,842 20181,010 No exploit published2 Outside Waratek scope5 Not applicable1,003 Critical297 High533 Medium170 Low10 not blocked1,010 Exploited11 Working exploit published52 Proof of concept only6 Forecast only2 No public exploit939 2019481 No exploit published4 Outside Waratek scope21 Not applicable456 Critical127 High278 Medium74 Low2 not blocked481 Exploited8 Working exploit published24 Proof of concept only7 Forecast only1 No public exploit441 2020188 No exploit published1 Outside Waratek scope12 Not applicable175 Critical51 High87 Medium49 Low1 not blocked188 Exploited2 Working exploit published3 Proof of concept only1 Forecast only1 No public exploit181 2021296 Outside Waratek scope13 Not applicable283 Critical36 High220 Medium39 Low1 not blocked296 Exploited11 Proof of concept only2 No public exploit283 2022340 Outside Waratek scope2 Not applicable338 Critical37 High205 Medium98 not blocked340 Exploited2 Proof of concept only28 No public exploit310 2023231 Not applicable231 Critical40 High139 Medium49 Low3 not blocked231 Exploited6 Proof of concept only45 No public exploit180 2024295 No exploit published1 Not applicable294 Critical30 High224 Medium38 Low3 not blocked295 Exploited2 Working exploit published2 Proof of concept only57 No public exploit234 20251,157 No exploit published1 Outside Waratek scope2 Not applicable1,154 Critical43 High735 Medium269 Low110 not blocked1,157 Exploited7 Working exploit published8 Proof of concept only769 No public exploit373 20261,368 Outside Waratek scope1 Not applicable1,367 Critical126 High802 Medium181 Low259 not blocked1,368 Exploited5 Proof of concept only836 No public exploit527
1999200220052008201120142017202020232026
14,608 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 147 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-114566 High 2026-11-12 Not applicable No public exploit OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30770.
CVE-2026-126917 High 2026-11-11 Not applicable No public exploit Memory corruption in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95405 High 2026-11-10 Not applicable No public exploit In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-95403 High 2026-11-10 Not applicable No public exploit In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-95402 High 2026-11-10 Not applicable No public exploit In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-95401 High 2026-11-10 Not applicable No public exploit In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-95400 High 2026-11-10 Not applicable No public exploit In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-95397 High 2026-11-10 Not applicable No public exploit In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-59635 High 2026-11-10 Not applicable No public exploit In cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-59631 High 2026-11-10 Not applicable No public exploit In s_inter_rps_pred of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-59623 High 2026-11-10 Not applicable No public exploit In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59619 Low 2026-11-10 Not applicable No public exploit In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59616 High 2026-11-10 Not applicable No public exploit In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-59612 High 2026-11-10 Not applicable No public exploit In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-59608 High 2026-11-10 Not applicable No public exploit In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-59589 High 2026-11-10 Not applicable No public exploit In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59587 High 2026-11-10 Not applicable No public exploit In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of bounds write into global memory due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59578 High 2026-11-10 Not applicable No public exploit In s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-59573 High 2026-11-10 Not applicable No public exploit In max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-58813 Medium 2026-11-10 Not applicable No public exploit In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58809 Medium 2026-11-10 Not applicable No public exploit In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58804 High 2026-11-10 Not applicable No public exploit In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an oversized scratch memory declaration due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58791 High 2026-11-10 Not applicable No public exploit In pic_timing of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-58790 High 2026-11-10 Not applicable No public exploit In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-58788 High 2026-11-10 Not applicable No public exploit In stpropnci_process_std of stpropnci_std.cc, there is a possible way to trigger an out of bounds write into global state due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58786 High 2026-11-10 Not applicable No public exploit In cnm_memset of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-58785 Medium 2026-11-10 Not applicable No public exploit In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58781 Medium 2026-11-10 Not applicable No public exploit In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58757 High 2026-11-10 Not applicable No public exploit In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58729 Medium 2026-11-10 Not applicable No public exploit In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58705 Critical 2026-11-10 Not applicable No public exploit In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58697 High 2026-11-10 Not applicable No public exploit In codec3p_secure of codec3p_secure, there is a possible Heap Buffer Overflow due to a missing bounds check. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-56995 Medium 2026-11-10 Not applicable No public exploit In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56933 High 2026-11-10 Not applicable No public exploit In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-56911 Medium 2026-11-10 Not applicable No public exploit In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56910 High 2026-11-10 Not applicable No public exploit In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55346 Medium 2026-11-10 Not applicable No public exploit In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55344 High 2026-11-10 Not applicable No public exploit In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-55321 High 2026-11-10 Not applicable No public exploit In parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-55312 High 2026-11-10 Not applicable No public exploit In insert_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping table due to a non-heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-124948 High 2026-11-10 Not applicable No public exploit Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124853 Critical 2026-11-10 Not applicable No public exploit Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.
CVE-2026-124996 Medium 2026-11-09 Not applicable No public exploit A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.3. The impacted element is the function routing_sel_norm_kernel of the file exllamav3/exllamav3_ext/routing.cu of the component hash-MoE routing. This manipulation of the argument gate.tid2eid causes out-of-bounds read. Remote exploitation of the attack is possible. Upgrading to version 1.6.4 is sufficient to resolve this issue. Patch name: c9a57ae832a3035e264e0a412e1daf4ebb699b98. Upgrading the affected component is recommended.
CVE-2026-124994 Low 2026-11-09 Not applicable Proof of concept only A security flaw has been discovered in Turboderp-org ExLlamaV3 up to 1.6.3. The affected element is the function ngram_dequant of the file exllamav3/exllamav3_ext/ngram.cu of the component NGramEmbedding. The manipulation of the argument head_bias results in out-of-bounds read. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.4 is sufficient to fix this issue. The patch is identified as c9a57ae832a3035e264e0a412e1daf4ebb699b98. It is suggested to upgrade the affected component.
CVE-2026-124586 Medium 2026-11-09 Not applicable Proof of concept only A vulnerability was determined in Tencent RapidJSON 1.1.0. Impacted is the function GetCachedPowerByIndex in the library include/rapidjson/internal/diyfp.h. This manipulation of the argument decimalPosition causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-124563 High 2026-11-09 Not applicable No public exploit A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-124562 High 2026-11-09 Not applicable No public exploit A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-124561 High 2026-11-09 Not applicable Proof of concept only A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-124560 High 2026-11-09 Not applicable No public exploit A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-124060 High 2026-11-07 Not applicable Proof of concept only A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
CVE-2026-124059 High 2026-11-07 Not applicable Proof of concept only A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-124058 High 2026-11-07 Not applicable Proof of concept only A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ApCliKeyStr can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-124057 High 2026-11-07 Not applicable Proof of concept only A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-123966 Critical 2026-11-07 Not applicable Proof of concept only A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-123961 High 2026-11-07 Not applicable Proof of concept only A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-123960 High 2026-11-07 Not applicable Proof of concept only A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-123959 High 2026-11-07 Not applicable Proof of concept only A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument langType results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-123958 High 2026-11-07 Not applicable Proof of concept only A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
CVE-2026-123957 High 2026-11-07 Not applicable Proof of concept only A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-123269 Low 2026-11-06 Not applicable Proof of concept only A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descriptor_file_read_header of the file libvmdk/libvmdk_descriptor_file.c of the component Descriptor File Parser. The manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. The patch is identified as 175d3fc0a0b961f362f16e7560a6169d7213e16b. It is best practice to apply a patch to resolve this issue.
CVE-2026-123268 Low 2026-11-06 Not applicable Proof of concept only A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdk_extent_table_get_extent_data_file_path of the file libvmdk/libvmdk_extent_table.c of the component Extent Data File Handler. The manipulation leads to memory corruption. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The identifier of the patch is 175d3fc0a0b961f362f16e7560a6169d7213e16b. Applying a patch is the recommended action to fix this issue.
CVE-2026-122189 Low 2026-11-05 Not applicable Proof of concept only A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5. The affected element is the function OptGraph::InitQuantization of the file src/ppl/nn/engines/cuda/optimizer/opt_graph.cc of the component CUDA Optimizer. Such manipulation of the argument per_channel/bit_width/tensor_max/tensor_min/scale leads to out-of-bounds read. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-121617 High 2026-11-04 Not applicable Proof of concept only A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function init_multipart of the file /cgi-bin/upload_fw.cgi of the component Header Parser. The manipulation results in out-of-bounds write. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-121616 Medium 2026-11-04 Not applicable Proof of concept only A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the file /cgi-bin/mesh_login.cgi of the component JSON Request Parser. The manipulation of the argument username/password/token/source/cn/action leads to out-of-bounds write. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-121600 High 2026-11-04 Not applicable Proof of concept only A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
CVE-2026-121599 High 2026-11-04 Not applicable Proof of concept only A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVE-2026-121598 High 2026-11-04 Not applicable Proof of concept only A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-121597 High 2026-11-04 Not applicable Proof of concept only A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
CVE-2026-95730 Medium 2026-11-03 Not applicable No public exploit A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected system.
CVE-2026-121517 Low 2026-11-03 Not applicable Proof of concept only A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerability is an unknown functionality of the component TIFF Wang Annotation Handler. Performing a manipulation results in heap-based buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit is now public and may be used. It is recommended to apply a patch to fix this issue. The vendor confirms: "[T]he TIF-Annotations option is OFF by default. Means, normal users are not affected ... the danger level for this is low".
CVE-2026-121229 Critical 2026-11-03 Not applicable No public exploit Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-121074 Critical 2026-11-03 Not applicable No public exploit Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-120572 High 2026-11-03 Not applicable No public exploit Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159.0.1 and Thunderbird 160.
CVE-2026-59010 Medium 2026-11-02 Not applicable No public exploit In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58988 Medium 2026-11-02 Not applicable No public exploit In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58977 Medium 2026-11-02 Not applicable No public exploit In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58975 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58853 High 2026-11-02 Not applicable No public exploit In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58824 High 2026-11-02 Not applicable No public exploit In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-120337 Medium 2026-11-02 Not applicable Proof of concept only A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-120336 Medium 2026-11-02 Not applicable Proof of concept only A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-120283 Critical 2026-11-02 Not applicable No public exploit A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-120281 Critical 2026-11-02 Not applicable Proof of concept only A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
CVE-2026-120241 High 2026-11-01 Not applicable Proof of concept only A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-120232 High 2026-11-01 Not applicable Proof of concept only A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.
CVE-2026-120226 Low 2026-11-01 Not applicable Proof of concept only A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPI_Connect of the component P2P SDK. Such manipulation of the argument input as part of String leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-120189 Critical 2026-11-01 Not applicable Proof of concept only A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
CVE-2026-118004 High 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117996 High 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117991 High 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117990 Critical 2026-10-27 Not applicable No public exploit Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117988 Critical 2026-10-27 Not applicable No public exploit Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117984 High 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117979 High 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117978 High 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117963 High 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117962 Critical 2026-10-27 Not applicable No public exploit Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117961 High 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117946 Critical 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117945 Critical 2026-10-27 Not applicable No public exploit Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
‹ prev page 1 of 147 next ›