Export limit exceeded: 425898 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425898 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425898 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425898 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (425898 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-125838 | 2026-11-12 | 8.8 High | ||
| Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.This issue affects Quality: from n/a through 3.3. | ||||
| CVE-2026-121355 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.1 Critical |
| Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction. | ||||
| CVE-2026-121574 | 2 Wordpress-extensions, Wpchill | 2 Passster, Passster | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20. | ||||
| CVE-2026-121028 | 2 Wordpress-extensions, Wpchill | 2 Strong Testimonials, Strong Testimonials | 2026-11-12 | 5.3 Medium |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Chill Strong Testimonials strong-testimonials allows Code Injection.This issue affects Strong Testimonials: from n/a through 3.3.17. | ||||
| CVE-2026-113408 | 2 Git, Git-scm | 2 Git, Git | 2026-11-12 | 3.3 Low |
| Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository | ||||
| CVE-2026-69901 | 1 Microsoft | 1 Teams | 2026-11-12 | 7.5 High |
| Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-67375 | 1 Microsoft | 1 Sql Server 2025 | 2026-11-12 | 8.8 High |
| Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-68783 | 1 Microsoft | 2 Sql Server 2025, Sql Server 2025 For X64-based Systems Cu10 | 2026-11-12 | 6.5 Medium |
| Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-85923 | 1 Microsoft | 1 Azure Devops Server | 2026-11-12 | 8.8 High |
| Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-83953 | 1 Microsoft | 1 Gihub Copilot Plugin For Jetbrains Ides | 2026-11-12 | 5.5 Medium |
| Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-67382 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-12 | 6.5 Medium |
| Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-67387 | 1 Microsoft | 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more | 2026-11-12 | 8.8 High |
| Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62903 | 1 Microsoft | 3 Microsoft Data Sqlclient 6 1, Microsoft Data Sqlclient 7 0, Microsoft Data Sqlclient 7 1 | 2026-11-12 | 7.4 High |
| Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-94513 | 1 Microsoft | 4 Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Sql Server 2022, Sql Server 2025 and 1 more | 2026-11-12 | 8 High |
| Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-88176 | 1 Microsoft | 1 Sharepoint Server | 2026-11-12 | 8.8 High |
| Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-117476 | 2026-11-12 | N/A | ||
| This is rejected. | ||||
| CVE-2026-117474 | 2026-11-12 | N/A | ||
| This is rejected. | ||||
| CVE-2026-117475 | 2026-11-12 | N/A | ||
| This is rejected. | ||||
| CVE-2026-108838 | 1 Ibm | 2 Agentics, Db2 Genius Hub | 2026-11-12 | 3.3 Low |
| IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption. | ||||
| CVE-2026-108910 | 1 Ibm | 2 Agentics, Db2 Genius Hub | 2026-11-12 | 4.3 Medium |
| IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to missing required cryptographic step. | ||||