Export limit exceeded: 384693 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (384693 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-76004 1 Utt 1 Hiper 1250gw 2026-08-19 9.9 Critical
A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-19387 1 Redhat 1 Enterprise Linux 2026-08-19 7.6 High
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. This can lead to application crash, denial of service, memory corruption, or potentially arbitrary code execution when untrusted media is processed.
CVE-2026-56089 1 Dell 1 Objectscale 2026-08-19 3.3 Low
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-56090 1 Dell 1 Objectscale 2026-08-19 7.3 High
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-56685 1 Dell 1 Objectscale 2026-08-19 7.3 High
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.
CVE-2026-56686 1 Dell 1 Objectscale 2026-08-19 7.8 High
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-59909 1 Dell 1 Objectscale 2026-08-19 7.1 High
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-59910 1 Dell 1 Objectscale 2026-08-19 7.8 High
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-59911 1 Dell 1 Objectscale 2026-08-19 5.5 Medium
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-21070 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 4.6 Medium
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21058 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.1 High
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21059 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.1 High
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21060 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 4.6 Medium
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21061 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 6.5 Medium
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21062 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 3.3 Low
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21063 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 6.1 Medium
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21064 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 5.5 Medium
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21065 1 Samsung 2 Android, Mobile Devices 2026-08-19 7.8 High
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.8 High
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.8 High
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.