Export limit exceeded: 424649 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424649 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-63774 | 1 Subnet Solutions | 2 Powersystem Center 2024, Powersystem Center 2026 | 2026-11-10 | 9 Critical |
| Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands. | ||||
| CVE-2026-63017 | 1 Subnet Solutions | 3 Powersystem Center 2020, Powersystem Center 2024, Powersystem Center 2026 | 2026-11-10 | 9 Critical |
| Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators. | ||||
| CVE-2026-48183 | 1 Samsung Semiconductor | 6 Exynos 1480, Exynos 1580, Exynos 1680 and 3 more | 2026-11-10 | 9.1 Critical |
| Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions | ||||
| CVE-2026-48179 | 1 Samsung Semiconductor | 5 Exynos 1080, Exynos 9110, Exynos Modem 5123 and 2 more | 2026-11-10 | 7.5 High |
| In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service | ||||
| CVE-2026-48178 | 1 Samsung Semiconductor | 4 Exynos 2200, Exynos 2400, Exynos 2500 and 1 more | 2026-11-10 | 8.8 High |
| Out of bound access in PPC due to race condition in global variable access | ||||
| CVE-2026-48176 | 1 Samsung Semiconductor | 5 Exynos 1080, Exynos 9110, Exynos Modem 5123 and 2 more | 2026-11-10 | 7.5 High |
| A memory corruption vulnerability caused by improper validation of messages | ||||
| CVE-2026-48174 | 1 Samsung Semiconductor | 9 Exynos 1280, Exynos 1330, Exynos 1380 and 6 more | 2026-11-10 | 9.8 Critical |
| In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | ||||
| CVE-2026-48173 | 1 Samsung Semiconductor | 19 Exynos 1280, Exynos 1330, Exynos 1380 and 16 more | 2026-11-10 | 9.8 Critical |
| In the NAS message handler, improper validation of the length field in NAS message causes memory corruption | ||||
| CVE-2026-35495 | 1 Samsung Semiconductor | 5 Exynos 1080, Exynos 9110, Exynos Modem 5123 and 2 more | 2026-11-10 | 6.5 Medium |
| In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability | ||||
| CVE-2026-35494 | 1 Samsung Semiconductor | 9 Exynos 1280, Exynos 1330, Exynos 1380 and 6 more | 2026-11-10 | 7.5 High |
| In the baseband, memory corruption during NAS packet processing can cause a denial of service. | ||||
| CVE-2026-33972 | 1 Samsung Semiconductor | 5 Exynos 1080, Exynos 9110, Exynos Modem 5123 and 2 more | 2026-11-10 | 9.8 Critical |
| In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. | ||||
| CVE-2026-33971 | 1 Samsung Semiconductor | 15 Exynos 1280, Exynos 1330, Exynos 1380 and 12 more | 2026-11-10 | 9.8 Critical |
| In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | ||||
| CVE-2026-33969 | 1 Samsung Semiconductor | 19 Exynos 1280, Exynos 1330, Exynos 1380 and 16 more | 2026-11-10 | 7.5 High |
| In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. | ||||
| CVE-2026-33965 | 1 Samsung Semiconductor | 5 Exynos 1080, Exynos 9110, Exynos Modem 5123 and 2 more | 2026-11-10 | 5.3 Medium |
| An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow. | ||||
| CVE-2026-33958 | 1 Samsung Semiconductor | 15 Exynos 1080, Exynos 1280, Exynos 1330 and 12 more | 2026-11-10 | 7.5 High |
| Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. | ||||
| CVE-2026-123776 | 2026-11-10 | 9.8 Critical | ||
| RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process. The normalize_params method sends any query key matching /tz/i to tz(), which sets $ENV{TZ} to that value, with no validation. It then calls tzset(). glibc treats a TZ value starting with / or : as a file path and opens it, so a value naming a FIFO or a blocking device stalls the process inside tzset(). | ||||
| CVE-2026-123029 | 1 Wowza | 1 Streaming Engine | 2026-11-10 | 7.5 High |
| Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza Streaming Engine process. | ||||
| CVE-2026-123025 | 1 Opnsense | 1 Os-acme-client | 2026-11-10 | N/A |
| An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gcloud_key model field and directly interpolates the string fields gcloud_account and gcloud_project into a shell command passed to proc_open() via LeUtils::run_shell_command() without any validation or escaping. A remote authenticated user with privileges to issue or renew certificates through the WebGUI/API can achieve arbitrary code execution as root. | ||||
| CVE-2026-123017 | 1 Godotsteam | 1 Godotsteam | 2026-11-10 | 6.5 Medium |
| GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grant_gold(1000000) call can be forged. | ||||
| CVE-2026-123014 | 1 Iterm2 | 1 Iterm2 | 2026-11-10 | N/A |
| iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands with the privileges of the logged-in user by inducing the user to open a crafted URL in iTerm2. Percent-encoded NUL characters survive input sanitization and are subsequently converted to whitespace during command-line parsing, allowing injection of additional arguments to /usr/bin/man. An attacker can inject the -P option to select an attacker-controlled pager command. NOTE: this issue exists because of an incomplete fix for CVE-2023-46321. | ||||