CVE Vulnerability Database
Search and browse 376,477 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21069 | MEDIUM | 5.1 | 0.1% | Aug 10, 2026 | Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local att... |
| CVE-2026-21068 | HIGH | 8.4 | 0.1% | Aug 10, 2026 | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execut... |
| CVE-2026-21067 | MEDIUM | 5.1 | 0.1% | Aug 10, 2026 | Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds me... |
| CVE-2026-21066 | MEDIUM | 5.1 | 0.1% | Aug 10, 2026 | Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write ou... |
| CVE-2026-21065 | MEDIUM | 4.8 | 0.1% | Aug 10, 2026 | Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bo... |
| CVE-2026-21064 | HIGH | 7 | 0.1% | Aug 10, 2026 | Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability. |
| CVE-2026-21063 | MEDIUM | 6.8 | 0.2% | Aug 10, 2026 | Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers t... |
| CVE-2026-64940 | HIGH | 8.8 | 0.4% | Aug 10, 2026 | Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular exp... |
| CVE-2026-57279 | MEDIUM | 6.8 | 0.3% | Aug 10, 2026 | Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may... |
| CVE-2026-21062 | MEDIUM | 4.8 | 0.1% | Aug 10, 2026 | Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard d... |
| CVE-2026-21061 | MEDIUM | 6 | 0.3% | Aug 10, 2026 | Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM relate... |
| CVE-2026-21060 | MEDIUM | 6.7 | 0.2% | Aug 10, 2026 | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data a... |
| CVE-2026-21059 | MEDIUM | 6.9 | 0.1% | Aug 10, 2026 | Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attac... |
| CVE-2026-21058 | MEDIUM | 6.9 | 0.1% | Aug 10, 2026 | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with... |
| CVE-2026-19089 | CRITICAL | 9.8 | 0.2% | Aug 10, 2026 | The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its ac... |
| CVE-2026-19077 | MEDIUM | 6.5 | 0.1% | Aug 10, 2026 | The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and d... |
| CVE-2026-19075 | MEDIUM | 5 | 0.1% | Aug 10, 2026 | All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=<post_id>` on any ... |
| CVE-2026-19074 | MEDIUM | 5.3 | 0.1% | Aug 10, 2026 | The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) i... |
| CVE-2026-19053 | CRITICAL | 9.1 | 0.2% | Aug 10, 2026 | The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQ... |
| CVE-2026-19049 | HIGH | 8.6 | 0.2% | Aug 10, 2026 | The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries,... |
| CVE-2026-18960 | MEDIUM | 5.4 | 0.2% | Aug 10, 2026 | The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, al... |
| CVE-2026-18946 | HIGH | 7.5 | 0.1% | Aug 10, 2026 | The Contact Form to Any API WordPress plugin before 3.0.7 does not use a random filename when copying files uploaded thr... |
| CVE-2026-18934 | MEDIUM | 5.5 | 0.1% | Aug 10, 2026 | The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed ... |
| CVE-2026-18786 | HIGH | 8.8 | 0.2% | Aug 10, 2026 | The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and ... |
| CVE-2026-18666 | MEDIUM | 4.3 | 0.2% | Aug 10, 2026 | The Library Management System WordPress plugin before 3.6.7 does not sanitize and escape a user-supplied parameter befor... |