Export limit exceeded: 380328 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (380328 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-56686 1 Dell 1 Objectscale 2026-08-19 7.8 High
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-59909 1 Dell 1 Objectscale 2026-08-19 7.1 High
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-59910 1 Dell 1 Objectscale 2026-08-19 7.8 High
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-59911 1 Dell 1 Objectscale 2026-08-19 5.5 Medium
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-21070 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 4.6 Medium
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21073 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 6.1 Medium
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.
CVE-2026-21058 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.1 High
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21059 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.1 High
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21060 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 4.6 Medium
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21061 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 6.5 Medium
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21062 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 3.3 Low
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21063 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 6.1 Medium
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21064 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 5.5 Medium
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21065 1 Samsung 2 Android, Mobile Devices 2026-08-19 7.8 High
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.8 High
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.8 High
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVE-2026-20498 2 Mediatek, Mediatek, Inc. 21 Mt6991, Mt6991 Firmware, Mt8768 and 18 more 2026-08-19 6 Medium
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.
CVE-2026-20473 2 Mediatek, Mediatek, Inc. 35 Mt6991, Mt6991 Firmware, Mt6993 and 32 more 2026-08-19 6 Medium
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.
CVE-2026-74965 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74963 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 5.4 Medium
Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.