Search vulnerabilities

Expected end of text, found ':' (at char 28), (line:1, col:29)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,857

CVE-2026-81201

Monster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Drupal Monster Menus Project
Products
Monster Menus Monster Menus
CVE-2026-40635

Insecure Temporary File in Dell PowerScale OneFS Leading to DoS and Information Tampering

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerscale Onefs
CVE-2026-46460

Low-Privilege Authorization Bypass Allows Log Tampering on Dell PowerScale OneFS

Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized modification of system logs.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerscale Onefs
CVE-2026-70425

Command Injection Vulnerability Allowing Local Privilege Escalation in Dell PowerScale OneFS

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Powerscale Onefs
CVE-2026-91781

GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 is able to address this issue. The identifier of the patch is 7322e9bc30cb282575a701c307851fd3d66fee68. It is suggested to upgrade the affected component.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2026-91780

GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference

A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2026-91779

GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference

A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2026-90829

GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2026-90830

GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2026-87088

Tanium addressed an unauthorized code execution vulnerability in Enforce.

Tanium addressed an unauthorized code execution vulnerability in Enforce.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Enforce
CVE-2026-87084

Tanium addressed a server-side request forgery vulnerability in Enforce.

Tanium addressed a server-side request forgery vulnerability in Enforce.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Enforce
CVE-2026-87075

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87073

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87072

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87048

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87033

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87030

Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87025

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply