CVE Database

138188+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-20589

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious …

Oct 5, 2026
CVE-2026-20588

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a …

Oct 5, 2026
CVE-2026-20587

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor …

Oct 5, 2026
CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with …

Oct 5, 2026
CVE-2026-20579

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious …

Oct 5, 2026
CVE-2026-20544

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if …

Oct 5, 2026
CVE-2026-20543

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges …

Oct 5, 2026
CVE-2026-20542

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …

Oct 5, 2026
CVE-2026-20541

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if …

Oct 5, 2026
CVE-2026-20540

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if …

Oct 5, 2026
CVE-2026-20539

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if …

Oct 5, 2026
CVE-2026-20538

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if …

Oct 5, 2026
CVE-2026-20537

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …

Oct 5, 2026
CVE-2026-20536

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …

Oct 5, 2026
CVE-2026-20535

In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a …

Oct 5, 2026
CVE-2026-20534

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if …

Oct 5, 2026
CVE-2026-20533

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious …

Oct 5, 2026
CVE-2026-20532

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges …

Oct 5, 2026
CVE-2026-20531

In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution …

Oct 5, 2026
CVE-2026-20530

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …

Oct 5, 2026
CVE-2026-20529

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …

Oct 5, 2026
CVE-2026-20528

In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, …

Oct 5, 2026
CVE-2026-20527

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE …

Oct 5, 2026
CVE-2026-20526

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if …

Oct 5, 2026
CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …

Oct 5, 2026
CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution …

Oct 5, 2026
CVE-2026-20523

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with …

Oct 5, 2026
CVE-2026-20522

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with …

Oct 5, 2026
CVE-2026-20521

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with …

Oct 5, 2026
CVE-2026-20520

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if …

Oct 5, 2026
CVE-2026-20519

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if …

Oct 5, 2026
CVE-2026-105180
6.3 MEDIUM

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of …

Oct 5, 2026
CVE-2026-105179
2.7 LOW

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. …

Oct 5, 2026
CVE-2026-105178
4.7 MEDIUM

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the …

Oct 5, 2026
CVE-2026-105177
4.7 MEDIUM

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug …

Oct 5, 2026
CVE-2026-105176
4.7 MEDIUM

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argument ID …

Oct 5, 2026
CVE-2026-105295
7.5 HIGH

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one …

Oct 5, 2026
CVE-2026-105294
7.4 HIGH

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig …

Oct 5, 2026
CVE-2026-105293
8.1 HIGH

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory …

Oct 5, 2026
CVE-2026-105292
5.9 MEDIUM

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state …

Oct 5, 2026
CVE-2026-105223
7.4 HIGH

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On-path attackers can impersonate the …

Oct 5, 2026
CVE-2026-105175
7.3 HIGH

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the component Student Registration. …

Oct 5, 2026
CVE-2026-105174
5.4 MEDIUM

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Management. …

Oct 5, 2026
CVE-2026-105173
3.5 LOW

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. …

Oct 5, 2026
CVE-2026-105172
7.3 HIGH

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation …

Oct 5, 2026
CVE-2026-105171
6.3 MEDIUM

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component …

Oct 5, 2026
CVE-2026-105170
7.3 HIGH

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation …

Oct 5, 2026
CVE-2026-105169
7.3 HIGH

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. …

Oct 5, 2026
CVE-2026-105168
6.3 MEDIUM

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation …

Oct 5, 2026
CVE-2026-105222
7.4 HIGH

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is passed to CURLOPT_SSL_VERIFYPEER. …

Oct 4, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.