Search

Search Results (358870 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-0133 1 Google 1 Android 2026-06-16 7.8 High
In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-12329 1 Mozilla 2 Firefox, Thunderbird 2026-06-16 5.3 Medium
Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.
CVE-2026-49113 2026-06-16 8.5 High
Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions.
CVE-2026-49080 2026-06-16 9.3 Critical
Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.
CVE-2026-49057 2026-06-16 7.5 High
Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions.
CVE-2026-40761 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.
CVE-2026-40760 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Behold <= 1.5 versions.
CVE-2026-40759 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.
CVE-2026-40758 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.
CVE-2026-40755 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.
CVE-2026-40751 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.
CVE-2026-40736 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.
CVE-2026-39580 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.
CVE-2026-39578 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.
CVE-2026-39577 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.
CVE-2026-39568 2026-06-16 8.1 High
Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.
CVE-2026-39567 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.
CVE-2026-39554 2026-06-16 8.1 High
Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.
CVE-2026-39548 2026-06-16 7.1 High
Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions.
CVE-2026-39547 2026-06-16 8.1 High
Unauthenticated Local File Inclusion in Getaway < 1.8 versions.