Busca de CVEs
375.184 resultadosCVE-2026-0064CRITICALIn multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service EPSS 0.1%CVE-2026-0092CRITICALIn Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalationEPSS 0.2%CVE-2026-8494MEDIUMPermalink Manager Lite <= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post TitleEPSS 0.3%CVE-2026-8607MEDIUMmyCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode AttributeEPSS 0.3%CVE-2026-0068CRITICALIn createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO coEPSS 0.1%CVE-2026-10094CRITICALPath Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026EPSS 0.4%CVE-2026-9570HIGHTaskbuilder < 5.0.8 - Reflected XSS via ShortcodeEPSS 0.1%CVE-2026-8383MEDIUMLearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST APIEPSS 0.6%CVE-2026-8089HIGHweMail < 2.1.3 - Reflected Cross-Site ScriptingEPSS 0.2%CVE-2026-7850MEDIUMWP Magnific Popup <= 1.0 - Author+ Stored XSS via href AttributeEPSS 0.1%CVE-2026-0057LOWIn Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission EPSS 0.1%CVE-2026-0019HIGHIn SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation oEPSS 0.1%CVE-2025-48643HIGHIn multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of priviEPSS 0.1%CVE-2025-48640HIGHIn multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to reEPSS 0.1%CVE-2025-48617HIGHIn overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to lEPSS 0.1%CVE-2025-48571MEDIUMIn multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. ThiEPSS 0.2%CVE-2026-53876HIGHRadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution witEPSS 1.8%CVE-2026-12360HIGHJetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX EndpointEPSS 0.3%CVE-2025-15642MEDIUMNetskope Client Service Insufficient Access ControlsEPSS 0.1%CVE-2026-50203CRITICALApache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry namesEPSS 0.6%