Export limit exceeded: 391689 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 391689 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (391689 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-33963 | 1 Samsung | 1 Exynos 1330 Firmware | 2026-09-14 | 7.5 High |
| An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of service. | ||||
| CVE-2026-33957 | 1 Samsung | 1 Exynos 1580 Firmware | 2026-09-14 | 4.2 Medium |
| An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write, potentially leading to memory corruption or information leakage. | ||||
| CVE-2026-18119 | 1 Concretecms | 1 Concrete Cms | 2026-09-14 | N/A |
| Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them into page CSS via a DOM sink, permitting stored cross-site scripting. An editor-level user could execute script in an administrator's session and escalate privileges. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 7.0 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N. Thanks Nguyen Manh Thuan for reporting. | ||||
| CVE-2026-43684 | 1 Apple | 2 Ios And Ipados, Macos | 2026-09-14 | N/A |
| A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory. | ||||
| CVE-2026-43683 | 1 Apple | 1 Macos | 2026-09-14 | N/A |
| An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory. | ||||
| CVE-2026-43695 | 1 Apple | 5 Ios And Ipados, Macos, Tvos and 2 more | 2026-09-14 | N/A |
| An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data. | ||||
| CVE-2026-43697 | 1 Apple | 1 Macos | 2026-09-14 | N/A |
| An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read. | ||||
| CVE-2026-28966 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-09-14 | N/A |
| An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination. | ||||
| CVE-2026-43687 | 1 Apple | 5 Ios And Ipados, Macos, Tvos and 2 more | 2026-09-14 | N/A |
| The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory. | ||||
| CVE-2026-43664 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-09-14 | N/A |
| This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access sensitive user data. | ||||
| CVE-2026-43690 | 1 Apple | 1 Macos | 2026-09-14 | N/A |
| A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory. | ||||
| CVE-2026-43741 | 1 Apple | 1 Macos | 2026-09-14 | N/A |
| A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data. | ||||
| CVE-2026-28960 | 1 Apple | 1 Ios And Ipados | 2026-09-14 | 7.5 High |
| A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service. | ||||
| CVE-2023-46273 | 1 Extremenetworks | 1 Iq Engine | 2026-09-14 | 8.8 High |
| Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send. | ||||
| CVE-2026-25832 | 1 Trustedfirmware | 1 Mbed Tls | 2026-09-14 | 3.7 Low |
| In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group. | ||||
| CVE-2023-37252 | 1 Mediawiki | 1 Checkuser | 2026-09-14 | 3.1 Low |
| An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden. | ||||
| CVE-2023-28148 | 1 Paessler | 1 Prtg Network Monitor | 2026-09-14 | 7.2 High |
| A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520. | ||||
| CVE-2026-23789 | 1 Samsung | 1 Exynos 850 Firmware | 2026-09-14 | 7.8 High |
| An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution. | ||||
| CVE-2023-24035 | 1 Nagios | 2 Nagios Xi, Xi | 2026-09-14 | 3.5 Low |
| An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to bruteforce the admin password, by measuring timing differences in the comparison. | ||||
| CVE-2026-16726 | 2026-09-14 | N/A | ||
| Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows attackers to stop Windows. | ||||