Lucene search
+L
CvelistRecent

398641 matches found

Cvelist
Cvelist
•added 2026/09/15 6:48 p.m.•29 views

CVE-2026-81921 In Concrete CMS 8.5.3 to 9,5,2, OAuth 2.0 Refresh-Token Grant Bypasses Account Status

Concrete CMS 8.5.3 through 9.5.2 enabled the OAuth 2.0 refresh-token grant using the unmodified upstream League grant, which issued new access tokens from a valid refresh token without re-checking the associated account's active status. A user who obtained a refresh token while active could...

2.3CVSS0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:46 p.m.•32 views

CVE-2026-82189 Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthenticated denial-of-service against the order pipeline: mass-failing pending orders to disrupt revenue and force manual reprocessing, or flipping already-fulfille...

8.7CVSS0.00428EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:46 p.m.•34 views

CVE-2026-81920 Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Dashboard SEO Excluded Words Reset Endpoint

Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page. The reset controller action cleared the administrator-configured reserved-word list concrete.seo.excludewords but did not validate the anti-CSRF token that the reset modal emitted, and ...

2.3CVSS0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:44 p.m.•37 views

CVE-2026-73467 On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus TACACS+ servers...

6.3CVSS0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:44 p.m.•35 views

CVE-2026-68532 Concrete CMS 9.0.0 to 9.5.2 is vunerable to CSRF in Concrete CMS Group Type Deletion Dashboard Action

Concrete CMS 9.0.0 to dashboard group type controller did not validate a CSRF token on its delete action, resulting in cross-site request forgery. A remote unauthenticated attacker could cause an authenticated user with group type management permission to delete a custom group type. The Concrete...

2.3CVSS0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:43 p.m.•30 views

CVE-2026-69204 Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/1.1 does not reject messages containing both Transfer-Encoding and Content-Length, so an intermediary and Ember can select different body framing rules. When ember-server is behind a keep-alive intermediary...

9.2CVSS0.00574EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/15 6:41 p.m.•33 views

CVE-2026-73466 On affected platforms running Arista EOS, under certain circumstances plaintext user passwords

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...

6.3CVSS0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:36 p.m.•37 views

CVE-2026-73465 On affected platforms running Arista EOS, under certain circumstances plaintext private keys

On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already...

6.3CVSS0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-58773

In linkloadgnssimage of linkdevice.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-58767

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•36 views

CVE-2026-58766

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00101EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•33 views

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•33 views

CVE-2026-58755

In smmuinstallnestedste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-58751

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-58747

In smmudetachdev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-58744

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00096EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•32 views

CVE-2026-58739

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00094EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•33 views

CVE-2026-58734

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00068EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-58731

In multiple functions of physmemextmemlinux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00097EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•33 views

CVE-2026-58728

In ARM64TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00068EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-58726

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00099EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•33 views

CVE-2026-58724

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00068EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

0.00094EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•36 views

CVE-2026-58718

In smmudetachdevnested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•33 views

CVE-2026-58716

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00078EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•38 views

CVE-2026-58710

In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00372EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-58701

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00068EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•89 views

CVE-2026-58704

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00591EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•38 views

CVE-2026-58699

In Vp9DecEndOfStream of vp9hwdoutput.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00101EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•36 views

CVE-2026-58698

In appmicpollmsghandler of appmicipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00095EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-58695

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00096EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•39 views

CVE-2026-58691

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00102EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•37 views

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00372EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-58679

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00106EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00102EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-57042

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00095EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•36 views

CVE-2026-57035

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-57014

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00096EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-57012

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•33 views

CVE-2026-57008

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00326EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•38 views

CVE-2026-57006

In acfwffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•32 views

CVE-2026-56997

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00372EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00095EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-56989

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•34 views

CVE-2026-56988

In multiple functions of bluetoothcco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.0007EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•33 views

CVE-2026-56986

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•38 views

CVE-2026-56985

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•38 views

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00097EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•37 views

CVE-2026-56979

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/15 6:34 p.m.•35 views

CVE-2026-56978

In getglobalconfigitemaddr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00101EPSS
SaveExploits0References1
Total number of security vulnerabilities398641