Sign in Create account →

CVE Explorer

Search and explore known software vulnerabilities.
33,953 matching CVE records · Page 18 of 1359
CVE-2026-90725 MEDIUM CVSS 4.9 v3.1

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Published: 2026-10-27 14:17:04.370000 Updated: 2026-10-27 14:58:57.680000
CVE-2026-68866 MEDIUM CVSS 6.5 v3.1

PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Published: 2026-10-27 14:17:01.220000 Updated: 2026-10-27 14:58:57.680000
CVE-2026-16307 MEDIUM CVSS 4.3 v3.1

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.

Published: 2026-10-27 14:17:00.783000 Updated: 2026-10-27 15:00:49.240000
CVE-2026-12887 MEDIUM CVSS 5.1 v4.0

In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory.

Published: 2026-10-27 14:17:00.590000 Updated: 2026-10-27 15:08:50.630000
CVE-2026-118027 NOT SCORED No CVSS score available

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

Published: 2026-10-27 14:17:00.493000 Updated: 2026-10-27 15:00:49.240000
CVE-2026-118026 NOT SCORED No CVSS score available

Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:17:00.390000 Updated: 2026-10-27 19:17:28.353000
CVE-2026-118025 NOT SCORED No CVSS score available

Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:17:00.293000 Updated: 2026-10-27 19:17:28.247000
CVE-2026-118024 NOT SCORED No CVSS score available

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:17:00.177000 Updated: 2026-10-27 19:17:28.147000
CVE-2026-118023 NOT SCORED No CVSS score available

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:17:00.077000 Updated: 2026-10-27 19:17:28.053000
CVE-2026-118022 NOT SCORED No CVSS score available

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.977000 Updated: 2026-10-27 19:17:27.950000
CVE-2026-118021 NOT SCORED No CVSS score available

Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.887000 Updated: 2026-10-27 19:17:27.850000
CVE-2026-118020 NOT SCORED No CVSS score available

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.787000 Updated: 2026-10-27 19:17:27.750000
CVE-2026-118019 NOT SCORED No CVSS score available

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.687000 Updated: 2026-10-27 19:17:27.653000
CVE-2026-118018 NOT SCORED No CVSS score available

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.

Published: 2026-10-27 14:16:59.587000 Updated: 2026-10-27 15:00:49.240000
CVE-2026-118017 NOT SCORED No CVSS score available

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.490000 Updated: 2026-10-27 19:17:27.553000
CVE-2026-118016 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.390000 Updated: 2026-10-27 19:17:27.453000
CVE-2026-118015 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.293000 Updated: 2026-10-27 19:17:27.350000
CVE-2026-118014 NOT SCORED No CVSS score available

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.200000 Updated: 2026-10-27 19:17:27.250000
CVE-2026-118013 NOT SCORED No CVSS score available

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.100000 Updated: 2026-10-27 19:17:27.150000
CVE-2026-118012 NOT SCORED No CVSS score available

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:59.003000 Updated: 2026-10-27 19:17:27.050000
CVE-2026-118011 NOT SCORED No CVSS score available

Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:58.903000 Updated: 2026-10-27 19:17:26.940000
CVE-2026-118010 NOT SCORED No CVSS score available

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:58.803000 Updated: 2026-10-27 19:17:26.833000
CVE-2026-118009 NOT SCORED No CVSS score available

Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:58.703000 Updated: 2026-10-27 19:17:26.737000
CVE-2026-118008 HIGH CVSS 8.8 v3.1

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:58.603000 Updated: 2026-10-28 04:17:59.213000
CVE-2026-118007 NOT SCORED No CVSS score available

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Published: 2026-10-27 14:16:58.503000 Updated: 2026-10-27 19:17:26.477000