Nvd - Vulnerabilities List

NvdRecent

413315 matches found

NVD•added 2026/10/22 9:17 p.m.•0 views

CVE-2026-115417

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common...

8.2CVSS

SaveExploits0References3

NVD•added 2026/10/22 9:17 p.m.•0 views

CVE-2026-115419

The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent...

8.6CVSS

SaveExploits0References4

NVD•added 2026/10/22 9:17 p.m.•0 views

CVE-2026-114625

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

9.9CVSS

SaveExploits0References1

NVD•added 2026/10/22 9:17 p.m.•0 views

CVE-2026-114583

tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall with filter="tar" to write files...

6.9CVSS

SaveExploits0References3

NVD•added 2026/10/22 9:17 p.m.•0 views

CVE-2026-114614

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...

2.6CVSS

SaveExploits0References3

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-115509

Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await, so the syncId ownership check never fails. Authenticated users knowing another workspace's sync ID can read, overwrite or delete its stream cursors...

4.2CVSS

SaveExploits0References5

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-115505

libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum replies with wrapping actualcount or...

7.6CVSS

SaveExploits0References6

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-115508

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via...

7.1CVSS

SaveExploits0References5

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-115398

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to...

6.8CVSS

SaveExploits0References5

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-115503

Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder that allows attackers to exhaust disk space. Attackers can persuade users to install a crafted zip bomb extension archive that expands without size limits, causing...

6.8CVSS

SaveExploits0References5

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-115504

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...

8.5CVSS

SaveExploits0References5

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-115507

Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates display names and task and project titles raw into email anchors. Authenticated users can craft titles or display names that close the anchor and inject...

5.1CVSS

SaveExploits0References6

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-115506

libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of...

8.7CVSS

SaveExploits0References5

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-112331

Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting require...

8.7CVSS

SaveExploits0References4

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-112330

Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted cloudEvents headers. Attackers can supply an invalid cloudEvents:motorversion, a single...

8.7CVSS

SaveExploits0References4

NVD•added 2026/10/22 8:17 p.m.•1 views

CVE-2026-112332

Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type...

8.7CVSS

SaveExploits0References4