Browse All CVEs
39,464 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-120091 |
high | 8.7 | 0.0048 | 2026-11-02 | Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-w | |
CVE-2026-111555 |
medium | 6.0 | 0.0011 | 2026-11-02 | A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an att | |
CVE-2026-105475 |
high | 8.7 | 0.0040 | 2026-11-02 | Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail a | |
CVE-2026-105476 |
high | 8.8 | 0.0053 | 2026-11-02 | Improper link resolution before file access in cPanel allows remote authenticated users to | |
CVE-2026-116958 |
medium | 6.7 | 0.0013 | 2026-11-02 | A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to | |
CVE-2026-84837 |
high | 7.8 | 0.0070 | 2026-11-02 | A flaw was found in rpm. An attacker can exploit a command injection vulnerability by infl | |
CVE-2026-11460 |
low | 2.9 | 0.0031 | 2026-11-02 | A flaw has been found in Boost Serialization. The impacted element is an unknown function. | |
CVE-2026-58873 |
high | 8.4 | 0.0013 | 2026-11-02 | In addDragDropListener of WindowManagerService.java, there is a possible permission bypass | |
CVE-2026-120503 |
low | 1.9 | 0.0014 | 2026-11-02 | A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0. This affects an un | |
CVE-2026-109243 |
medium | 4.1 | 0.0013 | 2026-11-02 | FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability | |
CVE-2026-109244 |
medium | 6.8 | 0.0014 | 2026-11-02 | FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-ma | |
CVE-2026-109245 |
high | 7.4 | 0.0023 | 2026-11-02 | FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in f | |
CVE-2026-109246 |
high | 7.1 | 0.0040 | 2026-11-02 | FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli sh | |
CVE-2026-109247 |
low | 2.1 | 0.0029 | 2026-11-02 | FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_t | |
CVE-2026-109248 |
medium | 6.9 | 0.0032 | 2026-11-02 | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard func | |
CVE-2026-109249 |
medium | 6.8 | 0.0017 | 2026-11-02 | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse | |
CVE-2026-109250 |
high | 7.0 | 0.0026 | 2026-11-02 | FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys( | |
CVE-2026-109251 |
medium | 6.0 | 0.0029 | 2026-11-02 | FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecke | |
CVE-2026-109252 |
medium | 6.0 | 0.0029 | 2026-11-02 | FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the | |
CVE-2026-109253 |
medium | 6.0 | 0.0029 | 2026-11-02 | FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEA | |
CVE-2026-109254 |
medium | 6.0 | 0.0025 | 2026-11-02 | FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd c | |
CVE-2026-109255 |
medium | 6.1 | 0.0050 | 2026-11-02 | 1 PoC | FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_ |
CVE-2026-109676 |
high | 8.7 | 0.0026 | 2026-11-02 | FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcar | |
CVE-2026-109677 |
high | 7.1 | 0.0035 | 2026-11-02 | FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in sma | |
CVE-2026-16305 |
— | — | 0.0026 | 2026-11-02 | Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthc | |
CVE-2026-116766 |
high | 8.3 | 0.0023 | 2026-11-02 | CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server ve | |
CVE-2026-58930 |
— | — | 0.0013 | 2026-11-02 | An unprivileged application can exploit a lack of package/signature validation in SystemUI | |
CVE-2026-58926 |
low | 2.5 | 0.0007 | 2026-11-02 | A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client t | |
CVE-2026-58927 |
— | — | 0.0015 | 2026-11-02 | The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race | |
CVE-2026-58924 |
— | — | 0.0020 | 2026-11-02 | The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. | |
CVE-2026-58925 |
— | — | 0.0010 | 2026-11-02 | The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware. | |
CVE-2026-49906 |
high | 7.8 | 0.0013 | 2026-11-02 | An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` | |
CVE-2026-58915 |
medium | 6.1 | 0.0012 | 2026-11-02 | A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) pas | |
CVE-2026-116767 |
high | 7.1 | 0.0023 | 2026-11-02 | CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior | |
CVE-2026-49903 |
— | — | 0.0014 | 2026-11-02 | The `ClusterRenderingService.dump()` method, accessible to processes holding `android.perm | |
CVE-2026-58977 |
medium | 6.7 | 0.0010 | 2026-11-02 | In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a | |
CVE-2026-116768 |
high | 7.1 | 0.0029 | 2026-11-02 | CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prio | |
CVE-2026-29508 |
high | 8.7 | 0.0072 | 2026-11-02 | ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer o | |
CVE-2026-116769 |
critical | 9.3 | 0.0040 | 2026-11-02 | CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers startin | |
CVE-2026-119740 |
high | 7.0 | 0.0079 | 2026-11-02 | Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated consol | |
CVE-2026-58943 |
high | 8.4 | 0.0009 | 2026-11-02 | In run of AddAccountSettings.java, there is a possible background activity launch due to a | |
CVE-2026-58944 |
high | 8.4 | 0.0009 | 2026-11-02 | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible backgroun | |
CVE-2026-58945 |
— | — | 0.0012 | 2026-11-02 | In multiple locations, there is a possible side channel information leak due to improperly | |
CVE-2026-58946 |
high | 8.4 | 0.0011 | 2026-11-02 | In navigateUpTo of ActivityClientController.java, there is a possible permission bypass du | |
CVE-2026-58949 |
high | 7.5 | 0.0028 | 2026-11-02 | In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of servic | |
CVE-2026-58951 |
— | — | 0.0012 | 2026-11-02 | In multiple locations, there is a possible permission bypass due to a missing permission c | |
CVE-2026-58953 |
— | — | 0.0016 | 2026-11-02 | In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer | |
CVE-2026-58955 |
medium | 6.2 | 0.0007 | 2026-11-02 | In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation | |
CVE-2026-58956 |
high | 8.4 | 0.0009 | 2026-11-02 | In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic | |
CVE-2026-58957 |
high | 8.4 | 0.0009 | 2026-11-02 | In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible backg |