Busca de CVEs

396.942 resultados
CVE-2026-3482MEDIUMIBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization BypassEPSS 0.5%CVE-2026-16157HIGHDuplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerabilityEPSS 0.1%CVE-2026-64835HIGHFFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio DecoderEPSS 0.3%CVE-2026-65650MEDIUMElgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.EPSS 0.4%CVE-2026-64834HIGHFFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF DemuxerEPSS 0.5%CVE-2026-64833HIGHFFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.cEPSS 0.2%CVE-2026-64832HIGHFFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.cEPSS 0.3%CVE-2026-64831HIGHFFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC DecoderEPSS 0.5%CVE-2026-64830HIGHFFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle DemuxerEPSS 0.3%CVE-2026-7328MEDIUMUnverified AXI Address in Subsystem Mode Commands Enables Denial of ServiceEPSS 0.1%CVE-2026-65013HIGHOnlook tRPC Insecure Direct Object Reference via multiple proceduresEPSS 0.4%CVE-2026-65012MEDIUMInvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folderEPSS 0.4%CVE-2026-65011MEDIUMGraylog2 Server Missing Permission Check on Event Definition DuplicateEPSS 0.4%CVE-2026-16615MEDIUMLibrest: weak random number generation in pkce implementationEPSS 0.3%CVE-2026-16552—CVE-2026-16552EPSS —CVE-2026-46737MEDIUMDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high prEPSS 0.3%CVE-2026-49499HIGHDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. AEPSS 0.4%CVE-2026-64828MEDIUMFroiden TableTrack 1.3.10 Stored XSS via Order Notes FieldEPSS 0.4%CVE-2026-46738CRITICALDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high prEPSS 0.3%CVE-2026-40712CRITICALDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high prEPSS 0.3%