45240 matches found
CVE-2026-21082
The CVE-2026-21082 entry identifies a relative path traversal vulnerability in Samsung Health prior to version 7.0.0, allowing local attackers to access sensitive information. Affected software: Samsung Health (pre-7.0.0). Root cause: relative path traversal. Impact: confidentiality of data may b...
CVE-2026-21077
Samsung Health is affected by CVE-2026-21077 due to incorrect authorization prior to version 7.0.0, allowing local attackers to access sensitive information. Affected software: Samsung Health (versions
CVE-2026-21076
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21074
Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege...
CVE-2026-14293
The Autopay WordPress plugin before 5.0.1 does not perform any capability or nonce check before saving a styling option from a public request, and does not escape that value when it is later output on the checkout page, allowing unauthenticated attackers to store JavaScript that executes in the...
CVE-2026-19089 Product Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File Upload
The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remot...
firezone gui-client-1.5.16
Secure remote access that's 3x faster than OpenVPN with zero-trust, peer-to-peer connections Docs | Quickstart | Download Clients | Discussions | Support Overview Firezone is an open source platform to securely manage remote access for any-sized organization. Unlike most VPNs, Firezone takes a...
CVE-2026-68254: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...
Linux Distros Unpatched Vulnerability : CVE-2026-68164
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/core: disallow overlapping input ranges for damonsetregions damonsetregions assumes the input ranges are sorted by the address and don't overlap each...
Linux Distros Unpatched Vulnerability : CVE-2026-68297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and TIPCNLBEARERSET accept user-supplied MTU values but only enforce a minim...
ROS-20260810-73-0022
The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Pass-The-Passkey Family of Attacks
Research on passkey security uncovered three practically exploitable zero-day vulnerabilities in Windows 11 and Microsoft Entra ID. Two of them form a replay chain: Windows writes complete WebAuthn assertions to the event log for device-bound and hybrid authenticators, while Microsoft Entra ID...
ROS-20260810-73-0016
The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260810-73-0023
The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-69654
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Variable Refresh Rate VRR implementation where the system fails to explicitly ensure that the minimum and maximum vertical frequencies vfreq provided by the Extend...
PT-2026-69756
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero occurs in the airoha watchdog driver when the clock frequency is zero. This happens because the clk get rate function can return 0 if the clock provider is unmanaged o...
PT-2026-69524
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap write exists in the MCTP serial receive state machine. The issue occurs in the mctp serial push header function when a frame length byte of zero is processed. Becau...
CVE-2026-68164: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlapping input ranges for damonsetregions damonsetregions assumes the input ranges are sorted by the address and don't overlap each other. Hence the assumption was initially to be explicitly validated...
CVE-2026-68297: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and TIPCNLBEARERSET accept user-supplied MTU values but only enforce a minimum bound, not a maximum. When a user sets the MTU to a value exceedin...