Search vulnerabilities

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,880

CVE-2023-22632

PRTG FTP Server Count Sensor Remote File Write

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Paessler
Products
Prtg Network Monitor
CVE-2026-23791

Out‑of‑Bounds Write in Samsung Exynos DPU Driver Enables Kernel Privilege Escalation

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver (due to missing input length validation in color mode LUT parsing) leads to kernel memory corruption and potential privilege escalation.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1280 Firmware
CVE-2026-33960

Malformed IOCTL Buffer Overflow in Samsung Exynos Wi-Fi Driver Leading to Denial of Service

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).

CVSS 3.1 · 2.8 Low EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1330 Firmware
CVE-2026-75051

Unauthorised Project Transfer Allowance in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Youtrack
CVE-2026-87013

Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/{id}/update/parent allowed a user to place a folder under itself or one of its descendants, while the folder tree walks used by DELETE /api/v1/folders/{id} and POST /api/v1/folders/{id}/read did not track visited folder identifiers. An authenticated user could persist a parent cycle and start a request that consumed CPU and memory indefinitely, with the condition remaining stored until repaired. This issue is fixed in version 0.11.1.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Open-webui Openwebui
Products
Open-webui Open Webui
CVE-2023-29377

File Type Rename Path Traversal Bypass in Softing OPC UA SDK and Secure Integration Server

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Softing
Products
Secure Integration Server
CVE-2023-24034

Open Redirect Vulnerability in Nagios XI Twilio AJAX Handler

An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability.

CVSS 3.1 · 3.1 Low EPSS 1.3% KEV · Not listed
Vendors
Nagios
Products
Nagios Xi Xi
CVE-2026-33964

Pointer Dereference in Samsung Exynos 1580 Camera Driver Causes Limited Information Disclosure and Denial of Service

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1580 Firmware
CVE-2026-33967

Samsung Exynos Camera Driver Out-of-Bounds Array Access Leading to Memory Corruption

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.

CVSS 3.1 · 2.8 Low EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1330 Firmware
CVE-2026-23787

Use‑After‑Free in Samsung Exynos DRM HDR Driver Causes Kernel Crash

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver (due to improper cleanup upon vmap failure) leads to a kernel crash.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1280 Firmware
CVE-2026-23792

Baseband Crash from Unauthenticated RRC Setup Message Handling in Exynos 1080 Firmware

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1080 Firmware
CVE-2026-23790

Double-Free in Exynos DPU Driver Causes Kernel Memory Corruption

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improper pointer management during DMA buffer reallocation) leads to kernel memory corruption and a potential use-after-free.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1280 Firmware
CVE-2026-23788

Exynos DRM HDR Driver Heap Overflow Leading to System Crash

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer size validation) leads to kernel memory corruption and a system crash.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1280 Firmware
CVE-2026-23793

Out-of-Bounds Memory Access in Samsung Exynos Camera GDC Driver

An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to kernel memory corruption under certain conditions.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1330 Firmware
CVE-2026-33956

Exynos Camera Firmware Out‑of‑Bounds Write Leads to Denial of Service

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, leading to denial of service.

CVSS 3.1 · 2.8 Low EPSS < 1% KEV · Not listed
Vendors
Samsung
Products
Exynos 1330 Firmware