Export limit exceeded: 391719 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (391719 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-90841 | 1 Phpgurukul | 1 Blood Donor Management System | 2026-09-14 | 7.3 High |
| A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. | ||||
| CVE-2023-50459 | 2026-09-14 | 5.4 Medium | ||
| An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of various frontend users or delete various frontend user accounts. | ||||
| CVE-2023-22631 | 1 Paessler | 1 Prtg Network Monitor | 2026-09-14 | 2.7 Low |
| PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor. | ||||
| CVE-2023-24034 | 1 Nagios | 2 Nagios Xi, Xi | 2026-09-14 | 3.1 Low |
| An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability. | ||||
| CVE-2026-33963 | 1 Samsung | 1 Exynos 1330 Firmware | 2026-09-14 | 7.5 High |
| An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of service. | ||||
| CVE-2026-33957 | 1 Samsung | 1 Exynos 1580 Firmware | 2026-09-14 | 4.2 Medium |
| An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write, potentially leading to memory corruption or information leakage. | ||||
| CVE-2026-18119 | 1 Concretecms | 1 Concrete Cms | 2026-09-14 | N/A |
| Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them into page CSS via a DOM sink, permitting stored cross-site scripting. An editor-level user could execute script in an administrator's session and escalate privileges. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 7.0 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N. Thanks Nguyen Manh Thuan for reporting. | ||||
| CVE-2026-43684 | 1 Apple | 2 Ios And Ipados, Macos | 2026-09-14 | N/A |
| A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory. | ||||
| CVE-2026-43683 | 1 Apple | 1 Macos | 2026-09-14 | N/A |
| An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory. | ||||
| CVE-2026-43695 | 1 Apple | 5 Ios And Ipados, Macos, Tvos and 2 more | 2026-09-14 | N/A |
| An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data. | ||||
| CVE-2026-43697 | 1 Apple | 1 Macos | 2026-09-14 | N/A |
| An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read. | ||||
| CVE-2026-28966 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-09-14 | N/A |
| An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination. | ||||
| CVE-2026-43687 | 1 Apple | 5 Ios And Ipados, Macos, Tvos and 2 more | 2026-09-14 | N/A |
| The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory. | ||||
| CVE-2026-43664 | 1 Apple | 4 Ios And Ipados, Macos, Tvos and 1 more | 2026-09-14 | N/A |
| This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access sensitive user data. | ||||
| CVE-2026-43690 | 1 Apple | 1 Macos | 2026-09-14 | N/A |
| A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory. | ||||
| CVE-2026-43741 | 1 Apple | 1 Macos | 2026-09-14 | N/A |
| A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data. | ||||
| CVE-2026-28960 | 1 Apple | 1 Ios And Ipados | 2026-09-14 | 7.5 High |
| A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service. | ||||
| CVE-2023-46273 | 1 Extremenetworks | 1 Iq Engine | 2026-09-14 | 8.8 High |
| Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send. | ||||
| CVE-2026-25832 | 1 Trustedfirmware | 1 Mbed Tls | 2026-09-14 | 3.7 Low |
| In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group. | ||||
| CVE-2023-37252 | 1 Mediawiki | 1 Checkuser | 2026-09-14 | 3.1 Low |
| An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden. | ||||