Export limit exceeded: 419506 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 419506 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 419506 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 419506 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 419506 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (419506 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-68990 | 2026-11-05 | N/A | ||
| In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation. | ||||
| CVE-2026-68991 | 2026-11-05 | N/A | ||
| In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition. | ||||
| CVE-2026-69002 | 2026-11-05 | N/A | ||
| Incorrect authorization in Samsung framework services due to missing permission checks | ||||
| CVE-2026-69066 | 2026-11-05 | N/A | ||
| Memory corruption in GPU driver due to improper validation of VMID reservation. | ||||
| CVE-2026-69050 | 2026-11-05 | N/A | ||
| Out-of-bounds memory access in a device driver due to improper resource state tracking. | ||||
| CVE-2026-69043 | 2026-11-05 | N/A | ||
| In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption | ||||
| CVE-2026-69044 | 2026-11-05 | N/A | ||
| In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption. | ||||
| CVE-2025-66366 | 2026-11-05 | N/A | ||
| Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash | ||||
| CVE-2026-33965 | 2026-11-05 | N/A | ||
| An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow. | ||||
| CVE-2025-66368 | 2026-11-05 | N/A | ||
| Incorrect handling of SDP payload leads to a Denial of Service | ||||
| CVE-2026-33958 | 2026-11-05 | N/A | ||
| Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. | ||||
| CVE-2026-33971 | 2026-11-05 | N/A | ||
| In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | ||||
| CVE-2026-33969 | 2026-11-05 | N/A | ||
| In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. | ||||
| CVE-2026-33972 | 2026-11-05 | N/A | ||
| In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. | ||||
| CVE-2026-48179 | 2026-11-05 | N/A | ||
| In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service | ||||
| CVE-2026-48176 | 2026-11-05 | N/A | ||
| A memory corruption vulnerability caused by improper validation of messages | ||||
| CVE-2026-35495 | 2026-11-05 | N/A | ||
| In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability | ||||
| CVE-2026-122992 | 2026-11-05 | N/A | ||
| In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field. | ||||
| CVE-2026-122160 | 1 Myshell-ai | 1 Ailice | 2026-11-05 | 6.3 Medium |
| A security vulnerability has been detected in myshell-ai AIlice up to 0.4.0. This vulnerability affects the function LoadModel_PEFT of the file ailice/core/llm/AModelCausalLM.py of the component HuggingFace Model Wrapper. The manipulation of the argument base_model_name_or_path leads to inclusion of functionality from untrusted control sphere. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. | ||||
| CVE-2026-117625 | 2 Jenkins, Jenkins Project | 2 Jenkins, Jenkins | 2026-11-05 | 4.3 Medium |
| A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain the server, port, user name, and no-proxy host list of the configured HTTP proxy. | ||||