CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-123012 NONE In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a different vulnerability than CVE-2026-52810.…
- CVE-2026-123011 MEDIUM · 4.2 STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.
- CVE-2026-123010 HIGH · 7.2 @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There may be other…
- CVE-2026-120553 MEDIUM · 6.4 The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slides_to_show' parameter in all versions up to, and including,…
- CVE-2026-120533 MEDIUM · 6.4 The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via theme_opts Parameter via User Profile in all versions up to, and including,…
- CVE-2026-118193 HIGH · 8.8 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via…
- CVE-2026-116617 HIGH · 8.1 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128…
- CVE-2026-104812 MEDIUM · 6.4 The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multi_media' Field Array Key in all versions due to insufficient input sanitization…
- CVE-2026-122236 MEDIUM · 6.3 A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page. Such manipulation leads to missing…
- CVE-2026-122191 MEDIUM · 6.3 A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown function of the file /admin/manage_booked.php. Executing a manipulation of the argument…
- CVE-2026-122190 LOW · 2.4 A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/add_category.php of the component…
- CVE-2026-69068 NONE Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.
- CVE-2026-69066 NONE Memory corruption in GPU driver due to improper validation of VMID reservation.
- CVE-2026-69050 NONE Out-of-bounds memory access in a device driver due to improper resource state tracking.
- CVE-2026-69044 NONE In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
- CVE-2026-69043 NONE In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
- CVE-2026-69025 NONE In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of…
- CVE-2026-69006 NONE Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
- CVE-2026-69005 NONE Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
- CVE-2026-69002 NONE Incorrect authorization in Samsung framework services due to missing permission checks
- CVE-2026-68994 NONE A double free vulnerability in NPU driver due to improper pointer management (941)
- CVE-2026-68993 NONE A double free vulnerability in NPU driver due to improper pointer management (940)
- CVE-2026-68991 NONE In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.
- CVE-2026-68990 NONE In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege…
- CVE-2026-68985 NONE In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial…
- CVE-2026-68984 NONE In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
- CVE-2026-48186 NONE Improper handling of messages before AS security activation can cause unexpected behavior
- CVE-2026-48183 NONE Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
- CVE-2026-48179 NONE In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service
- CVE-2026-48178 NONE Out of bound access in PPC due to race condition in global variable access
- CVE-2026-48176 NONE A memory corruption vulnerability caused by improper validation of messages
- CVE-2026-48175 MEDIUM · 5.5 Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
- CVE-2026-48174 NONE In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
- CVE-2026-48173 NONE In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
- CVE-2026-35495 NONE In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability
- CVE-2026-35494 NONE In the baseband, memory corruption during NAS packet processing can cause a denial of service.
- CVE-2026-33972 NONE In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
- CVE-2026-33971 NONE In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
- CVE-2026-33969 NONE In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.
- CVE-2026-33965 NONE An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.
- CVE-2026-33958 NONE Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
- CVE-2026-122992 NONE In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.
- CVE-2026-122323 HIGH · 7.5 Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers.…
- CVE-2026-122322 HIGH · 7.5 Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers.…
- CVE-2026-122321 CRITICAL · 9.1 Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string (such as a…
- CVE-2026-122320 HIGH · 7.7 Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace…
- CVE-2026-122319 HIGH · 7.5 Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type…
- CVE-2026-122318 HIGH · 7.7 Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name.…
- CVE-2026-122316 HIGH · 8.5 Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace.…
- CVE-2026-122315 HIGH · 7.5 Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can…