Export limit exceeded: 421045 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (421045 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-69006 | 1 Samsung Semiconductor | 15 Exynos 1280, Exynos 1330, Exynos 1380 and 12 more | 2026-11-06 | N/A |
| Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. | ||||
| CVE-2026-68985 | 1 Samsung Semiconductor | 3 Exynos 1280, Exynos 1380, Exynos 2200 | 2026-11-06 | N/A |
| In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service. | ||||
| CVE-2026-69005 | 1 Samsung Semiconductor | 6 Exynos 1480, Exynos 1580, Exynos 1680 and 3 more | 2026-11-06 | N/A |
| Integer overflow in NPU driver parameter processing due to insufficient bounds checking. | ||||
| CVE-2026-68984 | 1 Samsung Semiconductor | 10 Exynos 1280, Exynos 1380, Exynos 1480 and 7 more | 2026-11-06 | 7.8 High |
| In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. | ||||
| CVE-2026-48183 | 1 Samsung Semiconductor | 6 Exynos 1480, Exynos 1580, Exynos 1680 and 3 more | 2026-11-06 | N/A |
| Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions | ||||
| CVE-2026-68994 | 1 Samsung Semiconductor | 4 Exynos 1480, Exynos 1580, Exynos 2400 and 1 more | 2026-11-06 | N/A |
| A double free vulnerability in NPU driver due to improper pointer management (941) | ||||
| CVE-2026-68993 | 1 Samsung Semiconductor | 2 Exynos 1480, Exynos 2400 | 2026-11-06 | N/A |
| A double free vulnerability in NPU driver due to improper pointer management (940) | ||||
| CVE-2026-48186 | 1 Samsung Semiconductor | 13 Exynos 1280, Exynos 1330, Exynos 1380 and 10 more | 2026-11-06 | N/A |
| Improper handling of messages before AS security activation can cause unexpected behavior | ||||
| CVE-2026-48178 | 1 Samsung Semiconductor | 4 Exynos 2200, Exynos 2400, Exynos 2500 and 1 more | 2026-11-06 | N/A |
| Out of bound access in PPC due to race condition in global variable access | ||||
| CVE-2026-48175 | 1 Samsung Semiconductor | 11 Exynos 1280, Exynos 1330, Exynos 1380 and 8 more | 2026-11-06 | 5.5 Medium |
| Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. | ||||
| CVE-2026-35494 | 1 Samsung Semiconductor | 9 Exynos 1280, Exynos 1330, Exynos 1380 and 6 more | 2026-11-06 | N/A |
| In the baseband, memory corruption during NAS packet processing can cause a denial of service. | ||||
| CVE-2026-48174 | 1 Samsung Semiconductor | 9 Exynos 1280, Exynos 1330, Exynos 1380 and 6 more | 2026-11-06 | N/A |
| In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | ||||
| CVE-2026-48173 | 1 Samsung Semiconductor | 19 Exynos 1280, Exynos 1330, Exynos 1380 and 16 more | 2026-11-06 | N/A |
| In the NAS message handler, improper validation of the length field in NAS message causes memory corruption | ||||
| CVE-2026-123010 | 1 Twilio-labs | 1 Netlify-okta-auth | 2026-11-06 | 7.2 High |
| @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There may be other impacts in a misconfiguration where oktaUrl isn't set. | ||||
| CVE-2026-123859 | 2026-11-06 | 8.1 High | ||
| When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality in the Snowflake Connector for Python and the Snowflake Connector for Python (Universal Core) did not escape DataFrame column names before including them in generated SQL, which could allow SQL injection. In both products, a crafted column name could have been used to chain additional SQL statements onto the generated statement, potentially allowing an attacker to read, modify, or delete other data accessible to the application's Snowflake role. Exploitation required an application to pass attacker controlled column names into this functionality. The fix is available in Snowflake Connector for Python version 4.8.1 and Snowflake Connector for Python (Universal Core) version 5.2.0. Users must upgrade manually. | ||||
| CVE-2026-106022 | 1 Johnsoncontrols | 1 Easyio Neo Iomanager And Tools Installer | 2026-11-06 | N/A |
| Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0. | ||||
| CVE-2026-19876 | 1 Infinitt Healthcare | 1 Infinitt Ulite | 2026-11-06 | 6.1 Medium |
| A reflected cross-site scripting (XSS) vulnerability in the login/SSO error page of INFINITT ULite 5.0.2.1_BN48_20260528 and earlier allows an unauthenticated remote attacker to execute arbitrary JavaScript in the browser of a victim who opens a crafted link. An unsanitized request parameter is reflected without output encoding. Fixed in ULite 5.0.2.1 BN50. | ||||
| CVE-2026-106020 | 1 Johnsoncontrols | 1 Easyio Neo Io Manager And Tools Installer | 2026-11-06 | N/A |
| Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0. | ||||
| CVE-2026-19877 | 1 Infinitt Healthcare | 1 Infinitt Ulite | 2026-11-06 | 7.5 High |
| INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link validity window and gain unauthorized access to shared medical images. Fixed in ULite 5.0.2.1 BN50. | ||||
| CVE-2026-64894 | 1 Johnsoncontrols | 1 Easyio Neo Iomanager And Tools Installer | 2026-11-06 | N/A |
| Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0. | ||||