Export limit exceeded: 423918 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (423918 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-117709 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117708 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117707 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117706 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117705 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117704 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117703 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117702 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117701 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117700 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117699 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117698 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117697 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117696 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117695 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117694 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117693 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-117692 2026-10-28 N/A
Reserved in error; never associated with a vulnerability.
CVE-2026-118008 1 Mozilla 1 Firefox 2026-10-28 8.8 High
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-114730 1 Roundcube 1 Webmail 2026-10-28 7.2 High
Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcube_utils::is_local_url() omitted the RFC 6052 NAT64 prefix 64:ff9b::/96, the RFC 8215 local-use NAT64 prefix 64:ff9b:1::/48 and the unspecified address ::/128, so URLs such as http://[64:ff9b::7f00:1]/ passed the filter and reached loopback, link-local and cloud metadata addresses. Upstream fixed this in the commit “Fix SSRF filter (is_local_url()) bypass via NAT64 64:ff9b::/96”.