Export limit exceeded: 417922 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (417922 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-101172 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 6.2 Medium |
| Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality. | ||||
| CVE-2026-101170 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 4 Medium |
| DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101171 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 3.6 Low |
| Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity. | ||||
| CVE-2026-101175 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 4.3 Medium |
| Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101179 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 4.7 Medium |
| Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101180 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 4.3 Medium |
| DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101181 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.5 Medium |
| Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101182 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.9 Medium |
| Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101183 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.9 Medium |
| UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101185 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.9 Medium |
| OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101186 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 7.5 High |
| DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-101176 | 1 Huawei | 2 Emui, Harmonyos | 2026-11-02 | 7.1 High |
| Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2026-101174 | 1 Huawei | 1 Harmonyos | 2026-11-02 | 5.7 Medium |
| DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. | ||||
| CVE-2026-112887 | 1 Gitea | 1 Gitea | 2026-11-02 | N/A |
| Gitea Actions task tokens authenticate to the REST API as a shared system user with a negative ID, which repository, organization, project and key filters treated as having no owner restriction, and the token carried no API scope to restrict user-scoped routes. A user who can run a workflow could use the job's token with `GET /api/v1/user/repos` to list every repository on the instance, including private repositories of other users and organizations, with their metadata. Repository contents remained protected by per-repository permission checks. System users now own nothing, and `/api/v1/user` routes other than `GET /api/v1/user` accept only individual and bot accounts. | ||||
| CVE-2026-113429 | 1 Gitea | 1 Gitea | 2026-11-02 | N/A |
| Legacy (v1 to v3) Actions artifact uploads stored the request's `Content-Encoding` header unchecked in the column that is served as the artifact's `Content-Type` on download, and a value starting with `video/` or `audio/` also removed the sandboxing Content-Security-Policy. A user who can run an Actions job could upload an artifact that a browser renders as HTML on the Gitea origin when the direct artifact download URL is opened, and the URL is reachable anonymously on public repositories. A victim who opens the link runs the attacker's script with their own session, which for an administrator means control of the instance. Legacy uploads now store only the `gzip` marker, and the special serve headers are chosen only for valid media types. | ||||
| CVE-2026-114199 | 1 Gitea | 1 Gitea | 2026-11-02 | N/A |
| `GET /api/v1/users/{username}/heatmap` computed the contribution heatmap with the repository access of the token owner and ignored the public-only restriction of the access token, unlike the activity feed endpoints. A holder of a user's public-only token could read contribution counts and their 15-minute time buckets that stem from that user's activity in private repositories. Repository names and contents were not disclosed. For public-only tokens the heatmap now only counts activity visible to anonymous users. | ||||
| CVE-2026-119625 | 1 Gitea | 1 Gitea | 2026-11-02 | N/A |
| The `/{username}` web route accepted personal access tokens over HTTP Basic authentication without checking their scope. A token confined to an unrelated scope, such as `read:issue`, could read its owner's private activity through the user RSS/Atom feed and the profile activity tab, and other members' activity in a private organization through the organization feed; a public-only token could list the owner's private repositories and organizations and render private profile READMEs. For a site administrator's token this applied to every account. Tokens are now accepted on this route only for feeds, which require `read:user` or `read:organization`. | ||||
| CVE-2026-15195 | 1 Apidevtools | 1 Json-schema-ref-parser | 2026-11-02 | 6.3 Medium |
| A weakness has been identified in apidevtools json-schema-ref-parser. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. Upgrading to version 15.3.6 will fix this issue. This patch is called a786bc6afc3674f650496472ee93d5cf74c4bd84. It is suggested to upgrade the affected component. The project maintainer confirms: "I reproduced prototype pollution through the public $Refs.set() API in published versions 7.1.4, 9.0.0, 11.0.0, 14.0.0, 14.2.1, 15.3.0, and 15.3.5. The same pointer is rejected by 15.3.6 without modifying Object.prototype. This reported path requires an application to pass an attacker-controlled pointer to $Refs.set(); dependency presence alone does not establish exploitability." | ||||
| CVE-2026-107457 | 1 Qt | 2 Qt, Qtmqtt | 2026-11-02 | N/A |
| A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash. | ||||
| CVE-2026-86469 | 1 Redhat | 5 Enterprise Linux, Hardened Images, Hummingbird and 2 more | 2026-11-02 | 5.3 Medium |
| A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the destination directory can win that race and redirect the write to another file. | ||||