CVE Vulnerability Database
Search and browse 420,581 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-79858 | CRITICAL | 9.8 | 0.5% | Oct 22, 2026 | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow... |
| CVE-2026-79857 | CRITICAL | 9.8 | 1.4% | Oct 22, 2026 | There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that... |
| CVE-2026-79856 | CRITICAL | 9.8 | 0.6% | Oct 22, 2026 | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker... |
| CVE-2026-79855 | CRITICAL | 9.8 | 0.8% | Oct 22, 2026 | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumven... |
| CVE-2026-79854 | CRITICAL | 9.8 | 0.6% | Oct 22, 2026 | A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL inject... |
| CVE-2026-79853 | CRITICAL | 9.8 | 0.7% | Oct 22, 2026 | Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remo... |
| CVE-2026-79852 | CRITICAL | 9.8 | 0.6% | Oct 22, 2026 | A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct S... |
| CVE-2026-79851 | CRITICAL | 10 | 0.8% | Oct 22, 2026 | Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code... |
| CVE-2026-79850 | CRITICAL | 10 | 0.7% | Oct 22, 2026 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing aut... |
| CVE-2026-79849 | CRITICAL | 10 | 0.7% | Oct 22, 2026 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injecti... |
| CVE-2026-79848 | CRITICAL | 10 | 0.7% | Oct 22, 2026 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injecti... |
| CVE-2026-79847 | CRITICAL | 10 | 0.8% | Oct 22, 2026 | Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution ... |
| CVE-2026-79846 | CRITICAL | 10 | 1.4% | Oct 22, 2026 | Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote at... |
| CVE-2026-79844 | CRITICAL | 10 | 0.7% | Oct 22, 2026 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker... |
| CVE-2026-115519 | LOW | 2.1 | 0.2% | Oct 22, 2026 | Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated re... |
| CVE-2026-115517 | MEDIUM | 6.4 | 0.4% | Oct 22, 2026 | Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticat... |
| CVE-2026-115414 | HIGH | 7.8 | 0.9% | Oct 22, 2026 | OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terr... |
| CVE-2026-115397 | MEDIUM | 5.5 | 0.1% | Oct 22, 2026 | Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFold... |
| CVE-2026-115396 | MEDIUM | 5.5 | 0.1% | Oct 22, 2026 | Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIcon... |
| CVE-2026-115395 | MEDIUM | 5.5 | 0.1% | Oct 22, 2026 | Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that e... |
| CVE-2026-115394 | MEDIUM | 5.5 | 0.2% | Oct 22, 2026 | Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers... |
| CVE-2026-115393 | LOW | 3.8 | 0.1% | Oct 22, 2026 | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion... |
| CVE-2026-115392 | HIGH | 7.9 | 0.2% | Oct 22, 2026 | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandb... |
| CVE-2026-115391 | MEDIUM | 5.8 | 0.2% | Oct 22, 2026 | Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its... |
| CVE-2026-115390 | MEDIUM | 5.7 | 0.2% | Oct 22, 2026 | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref an... |