Vulnerabilities (CVE)
Yack CVE helps teams search and track vulnerabilities.
TOTAL
416,382 CVE
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. |
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. |
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. |
A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. |
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. |
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. |
Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile(). Attackers...Show more |
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerability that exposes database backups in the web-accessible /admin/backup directory....Show more |
Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craf...Show more |
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to...Show more |
1Microsoft 7Windows 10 21h2 Windows 10 22h2Windows 11 23h2+4 moreOct 28, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. |
1Microsoft 6Windows 11 23h2 Windows 11 24h2Windows 11 25h2+3 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
1Microsoft 7Windows 10 21h2 Windows 10 22h2Windows 11 23h2+4 moreOct 28, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. |
1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreOct 28, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 moreOct 28, 2026 Oct 13, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |