Browse All CVEs
39,968 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-21065 |
medium | 4.8 | 0.0015 | 2026-10-29 | Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows loca | |
CVE-2026-21066 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allo | |
CVE-2026-21067 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attac | |
CVE-2026-21068 |
high | 8.4 | 0.0017 | 2026-10-29 | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privil | |
CVE-2026-21069 |
medium | 5.1 | 0.0015 | 2026-10-29 | Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2 | |
CVE-2026-21070 |
medium | 5.1 | 0.0021 | 2026-10-29 | Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physic | |
CVE-2026-21071 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 a | |
CVE-2026-21072 |
medium | 5.1 | 0.0015 | 2026-10-29 | Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 all | |
CVE-2026-21073 |
medium | 5.2 | 0.0021 | 2026-10-29 | Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical | |
CVE-2026-21074 |
high | 7.2 | 0.0014 | 2026-10-29 | Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to | |
CVE-2026-21075 |
medium | 5.3 | 0.0049 | 2026-10-29 | Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 | |
CVE-2026-21076 |
medium | 6.9 | 0.0013 | 2026-10-29 | Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to | |
CVE-2026-21077 |
medium | 6.9 | 0.0013 | 2026-10-29 | Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to | |
CVE-2026-21078 |
medium | 4.7 | 0.0016 | 2026-10-29 | Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior | |
CVE-2026-21079 |
high | 7.0 | 0.0010 | 2026-10-29 | Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adja | |
CVE-2026-21080 |
medium | 6.9 | 0.0017 | 2026-10-29 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allow | |
CVE-2026-21081 |
medium | 5.1 | 0.0013 | 2026-10-29 | Improper export of android application components in SamsungPassAutofill prior to version | |
CVE-2026-21082 |
medium | 6.9 | 0.0017 | 2026-10-29 | Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to | |
CVE-2026-21083 |
medium | 6.8 | 0.0026 | 2026-10-29 | Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attack | |
CVE-2026-21084 |
medium | 6.9 | 0.0013 | 2026-10-29 | Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers t | |
CVE-2026-44630 |
high | 7.5 | 0.0059 | 2026-10-29 | Improper validation of length fields in the Apache IoTDB RPC service may allow a remote un | |
CVE-2026-66915 |
critical | 10.0 | 0.0082 | 2026-10-29 | Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthentic | |
CVE-2026-28672 |
critical | 9.8 | 0.0263 | 2026-10-29 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulner | |
CVE-2026-32227 |
critical | 9.8 | 0.0069 | 2026-10-29 | SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users a | |
CVE-2026-40920 |
critical | 9.8 | 0.0073 | 2026-10-29 | Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Us | |
CVE-2026-42537 |
critical | 9.8 | 0.0129 | 2026-10-29 | Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommend | |
CVE-2026-44416 |
critical | 9.8 | 0.0124 | 2026-10-29 | Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry componen | |
CVE-2026-55799 |
critical | 9.8 | 0.0122 | 2026-10-29 | Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 | |
CVE-2026-55814 |
high | 7.5 | 0.0066 | 2026-10-29 | Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are reco | |
CVE-2026-61899 |
high | 7.5 | 0.0071 | 2026-10-29 | Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers | |
CVE-2026-65942 |
high | 7.5 | 0.0059 | 2026-10-29 | TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users a | |
CVE-2026-65945 |
medium | 6.5 | 0.0064 | 2026-10-29 | Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommende | |
CVE-2026-65948 |
high | 7.3 | 0.0062 | 2026-10-29 | UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth | |
CVE-2026-66484 |
medium | 4.6 | 0.0020 | 2026-10-29 | GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionali | |
CVE-2026-66485 |
medium | 4.6 | 0.0019 | 2026-10-29 | GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at s | |
CVE-2026-66486 |
medium | 4.6 | 0.0018 | 2026-10-29 | GNU cpio is vulnerable to improper encoding or escaping of output in its archive member li | |
CVE-2026-71391 |
medium | 5.3 | 0.0054 | 2026-10-29 | GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. | |
CVE-2026-71392 |
medium | 5.3 | 0.0067 | 2026-10-29 | GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12 | |
CVE-2026-71393 |
medium | 5.3 | 0.0067 | 2026-10-29 | GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in sr | |
CVE-2026-71394 |
medium | 5.3 | 0.0044 | 2026-10-29 | GNU Emacs for Android improperly validates the table header input in sfnt_read_table_direc | |
CVE-2026-72564 |
critical | 9.6 | 0.0044 | 2026-10-29 | An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authen | |
CVE-2026-72565 |
critical | 9.8 | 0.0068 | 2026-10-29 | A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remo | |
CVE-2026-72566 |
high | 7.7 | 0.0035 | 2026-10-29 | A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 a | |
CVE-2026-72567 |
critical | 9.8 | 0.0079 | 2026-10-29 | An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f3 | |
CVE-2026-72569 |
critical | 9.1 | 0.0074 | 2026-10-29 | A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauth | |
CVE-2026-72570 |
medium | 5.4 | 0.0024 | 2026-10-29 | A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3 | |
CVE-2026-72571 |
high | 7.5 | 0.0115 | 2026-10-29 | A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an una | |
CVE-2026-72572 |
high | 7.5 | 0.0115 | 2026-10-29 | A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated re | |
CVE-2026-72573 |
high | 8.8 | 0.0157 | 2026-10-29 | An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authentic | |
CVE-2026-72574 |
medium | 6.1 | 0.0042 | 2026-10-29 | A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthentica |