Export limit exceeded: 405485 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 405485 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (405486 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-89200 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 6.7 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database. | ||||
| CVE-2026-89201 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 7.5 High |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. | ||||
| CVE-2026-89202 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 6.5 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service. | ||||
| CVE-2026-89204 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 5.4 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation. | ||||
| CVE-2026-89205 | 1 Siemens | 1 Ruggedcom Crossbow | 2026-10-13 | 6.3 Medium |
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices. | ||||
| CVE-2026-109783 | 2026-10-13 | N/A | ||
| Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5. | ||||
| CVE-2026-109782 | 2026-10-13 | N/A | ||
| Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5. | ||||
| CVE-2026-109781 | 2026-10-13 | N/A | ||
| Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109780 | 2026-10-13 | N/A | ||
| Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109779 | 2026-10-13 | N/A | ||
| Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109778 | 2026-10-13 | N/A | ||
| Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109777 | 2026-10-13 | N/A | ||
| Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109776 | 2026-10-13 | N/A | ||
| Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109775 | 2026-10-13 | N/A | ||
| Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109774 | 2026-10-13 | N/A | ||
| Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109773 | 2026-10-13 | N/A | ||
| Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109772 | 2026-10-13 | N/A | ||
| Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109771 | 2026-10-13 | N/A | ||
| Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158. | ||||
| CVE-2026-109770 | 2026-10-13 | N/A | ||
| Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. | ||||
| CVE-2026-109769 | 2026-10-13 | N/A | ||
| Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158. | ||||