CVEs published March 2, 2026
220 CVEs were published on March 2, 2026: 43 critical, 95 high. 1 is now in CISA KEV.
- Published
- 220
- Critical
- 43
- High
- 95
- Medium
- 73
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 66
Most affected products
- Google Android
- 57
- chamilo-lms
- 25
- MediaTek chipset
- 21
- Qualcomm Snapdragon
- 15
- nocodb
- 10
- CGM CLININET
- 7
- exiv2
- 3
- itsourcecode University Management System
- 3
- AWS-LC · aws-lc-sys
- 2
- Changing IDExpert Windows Logon Agent
- 2
Critical 43
- CVE-2026-0006In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.Google Android
- CVE-2025-48645In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation.Google Android
- CVE-2025-48609In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionGoogle Android
- CVE-2025-50187Chamilo: Evaluation of untrusted user input leads to Remote Code Executionchamilo-lms
- CVE-2026-23600A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).Hewlett Packard Enterprise (HPE) HPE AutoPass License Server
- CVE-2026-3432Sim Studio AI - Unauthenticated OAuth Token TheftSimStudioAI sim
- CVE-2026-3431Sim Studio AI - MongoDB SSRF and Arbitrary Document DeletionSimStudioAI sim
- CVE-2025-14532Remote Code Execution via Unrestricted File Upload in DobryCMSStudio Fabryka DobryCMS
- CVE-2025-12462Blind SQL Injection in DobryCMSStudio Fabryka DobryCMS
- CVE-2025-30044RCE on uhcapache user permissionsCGM CLININET
- CVE-2025-30042Session generation possible with certificate number onlyCGM CLININET
- CVE-2025-30035Lack of API authentication allowing session generation for any userCGM CLININET
- CVE-2026-2584SQL Injection in Ciser System SL firmwareCiser System SL CSIP firmware
- CVE-2026-3422e-Excellence｜U-Office Force - Insecure Deserializatione-Excellence U-Office Force
- CVE-2026-3000Changing｜IDExpert Windows Logon Agent - Remote Code ExecutionChanging IDExpert Windows Logon Agent
- CVE-2026-2999Changing｜IDExpert Windows Logon Agent - Remote Code ExecutionChanging IDExpert Windows Logon Agent
- CVE-2026-24101An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi.
- CVE-2026-24105An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi.
- CVE-2026-24107An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-24108An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-24109An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-24110An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-24111An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-24113An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-24115An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-26694code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php.
- CVE-2026-26695code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php.
- CVE-2026-26696code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php.
- CVE-2026-26700sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php.
- CVE-2026-26701sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user.php.
- CVE-2026-26702sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php.
- CVE-2026-26703sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php.
- CVE-2026-26704sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php.
- CVE-2026-26705sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php.
- CVE-2026-26706sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php.
- CVE-2026-26707sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_supplier.php.
- CVE-2026-26708sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php.
- CVE-2026-26709code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php.
- CVE-2026-26710code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php.
- CVE-2026-26711code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php.
- CVE-2026-26712code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php.
- CVE-2026-26713code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php.
- CVE-2026-26720An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module.
High 95
- CVE-2026-1566LatePoint <= 5.2.7 - Authenticated (Agent+) Privilege EscalationLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2026-3338PKCS7_verify Signature Validation Bypass in AWS-LCAWS-LC · aws-lc-sys
- CVE-2026-3336PKCS7_verify Certificate Chain Validation Bypass in AWS-LCAWS-LC · aws-lc-sys
- CVE-2026-21882theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-executionAsfhtgkDavid theshit · theshit
- CVE-2025-48636In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error.Google Android
- CVE-2024-31328In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on thGoogle Android
- CVE-2026-21853AFFiNE: One-click Remote Code Execution through Custom URL Handlingtoeverything AFFiNE
- CVE-2026-0047In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permisGoogle Android
- CVE-2026-0038In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code.Google Android
- CVE-2026-0037In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code.Google Android
- CVE-2026-0035In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic erGoogle Android
- CVE-2026-0034In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation.Google Android
- CVE-2026-0032In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code.Google Android
- CVE-2026-0031In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-0030In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2026-0029In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code.Google Android
- CVE-2026-0028In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-0026In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error inGoogle Android
- CVE-2026-0025In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass.Google Android
- CVE-2026-0023In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permisGoogle Android
- CVE-2026-0021In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy.Google Android
- CVE-2026-0020In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a perGoogle Android
- CVE-2026-0017In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code.Google Android
- CVE-2026-0013In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy.Google Android
- CVE-2026-0011In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the codeGoogle Android
- CVE-2026-0010In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2026-0008In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy.Google Android
- CVE-2026-0007In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.Google Android
- CVE-2025-48654In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code.Google Android
- CVE-2025-48653In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in the code.Google Android
- CVE-2025-48650In multiple locations, there is a possible information disclosure due to SQL injection.Google Android
- CVE-2025-48646In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy.Google Android
- CVE-2025-48641In multiple functions of Nfc.h, there is a possible use after free due to a race condition.Google Android
- CVE-2025-48635In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code.Google Android
- CVE-2025-48634In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check.Google Android
- CVE-2025-48630In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure.Google Android
- CVE-2025-48619In multiple functions of ContentProvider.java, there is a possible way for an app with read-only access to truncate files due to a logic errGoogle Android
- CVE-2025-48613In VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the original image was previously signed with the Google Android
- CVE-2025-48605In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code.Google Android
- CVE-2025-48602In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic erroGoogle Android
- CVE-2025-48582In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect.Google Android
- CVE-2025-48579In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy.Google Android
- CVE-2025-48578In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a missing permisGoogle Android
- CVE-2025-48577In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition.Google Android
- CVE-2025-48574In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permiGoogle Android
- CVE-2025-48568In multiple locations, there is a possible lockscreen bypass due to a race condition.Google Android
- CVE-2025-48567In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrecGoogle Android
- CVE-2025-32313In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2026-0654Command injection on TP-Link Deco BE25TP-Link Systems Deco BE25
- CVE-2026-3180Contest Gallery <= 28.1.4 - Unauthenticated SQL Injectioncontest-gallery Contest Gallery – Upload & Vote Photos, Med…
- CVE-2026-3132Master Addons for Elementor Premium <= 2.1.3 - Authenticated (Subscriber+) Remote Code Execution via render_previewJewel Theme Master Addons for Elementor Premium
- CVE-2026-21385Integer Overflow or Wraparound in GraphicsQualcomm Snapdragon
- CVE-2025-59603Out-of-bounds Write in Computer VisionQualcomm Snapdragon
- CVE-2025-59600Buffer Over-read in GraphicsQualcomm Snapdragon
- CVE-2025-47386Use After Free in Automotive AudioQualcomm Snapdragon
- CVE-2025-47385Improper Access Control for Register Interface in SCE-MinkQualcomm Snapdragon
- CVE-2025-47383Missing Cryptographic Step in Data ModemQualcomm Snapdragon
- CVE-2025-47381Use After Free in Automotive AudioQualcomm Snapdragon
- CVE-2025-47379Use After Free in Automotive AudioQualcomm Snapdragon
- CVE-2025-47378Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOSQualcomm Snapdragon
- CVE-2025-47377Use After Free in Automotive AudioQualcomm Snapdragon
- CVE-2025-47376Use After Free in Automotive AudioQualcomm Snapdragon
- CVE-2025-47375Use After Free in Automotive AudioQualcomm Snapdragon
- CVE-2025-47373Out-of-bounds Write in AutomotiveQualcomm Snapdragon
- CVE-2025-64427ZimaOS is vulnerable to Server-Side Request Forgery (SSRF)IceWhaleTech ZimaOS
- CVE-2026-28286ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via APIIceWhaleTech ZimaOS
- CVE-2025-52998Chamilo: PHAR deserialization bypasschamilo-lms
- CVE-2025-50199Chamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF)chamilo-lms
- CVE-2025-52469Chamilo: Friend Request Workflow Bypass - Unauthorized Friend Addition and ID Validation Bypasschamilo-lms
- CVE-2025-52468Chamilo: Stored XSS Vulnerability via CSV User Importchamilo-lms
- CVE-2025-50198Chamilo: Deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configuration_file; POST course_path; POST home_path parameterschamilo-lms
- CVE-2026-28403Textream Cross-Site WebSocket Hijacking (CSWSH) vulnerabilityf textream
- CVE-2025-50197Chamilo: OS Command Injection in /main/admin/sub_language_ajax.inc.php via POST new_language parameterchamilo-lms
- CVE-2025-50196Chamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main_database parameterchamilo-lms
- CVE-2025-50195Chamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.phpchamilo-lms
- CVE-2025-50194Chamilo: OS Command Injection in /main/cron/lang/check_parse_lang.phpchamilo-lms
- CVE-2025-50193Chamilo: OS command Injection in /plugin/vchamilo/views/import.php with the POST to_main_database parameterchamilo-lms
- CVE-2025-50192Chamilo: Time-based SQL Injection in /main/webservices/registration.soap.phpchamilo-lms
- CVE-2025-50191Chamilo: Error-based SQL Injection via POST userFile with the /main/exercise/hotpotatoes.php scriptchamilo-lms
- CVE-2025-50190Chamilo: Error-based SQL Injection via GET openid.assoc_handle with the /index.php scriptchamilo-lms
- CVE-2025-50189Chamilo: Error-based SQL Injectionchamilo-lms
- CVE-2025-50188Error-based SQL Injection in Chamilo LMSchamilo-lms
- CVE-2025-52482Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.phpchamilo-lms
- CVE-2024-47886Chamilo: Post-Auth Remote Code Executionchamilo-lms
- CVE-2025-58402Insecure Direct Object Reference Message IDCGM CLININET
- CVE-2025-10350SQL injection in CGM NETRAADCGM NETRAAD
- CVE-2026-20416In pcie, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20434In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20430In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check.MediaTek chipset
- CVE-2026-20423In wlan STA driver, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2025-58107In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung
- CVE-2025-70252An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi.
- CVE-2026-24112An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-24114An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.
- CVE-2026-26699sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin_change_picture.php.
Medium, low and unrated 82
- CVE-2026-1336AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modificationays-pro AI ChatBot with ChatGPT and Content Generator by AYS
- CVE-2026-2583Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fieldscreativethemeshq Blocksy
- CVE-2026-3337Timing Side-Channel in AES-CCM Tag Verification in AWS-LCAWS-LC · AWS-LC-FIPS +2
- CVE-2026-2256Command injection vulnerability in ModelScope's ms-agentModelScope ms-agent · ms-agent
- CVE-2026-25884Exiv2: Out-of-bounds read in CrwMap::decode0x0805exiv2
- CVE-2026-27596Exiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer Overflowexiv2
- CVE-2026-27631Exiv2: Uncaught exception - cannot create std::vector larger than max_size()exiv2
- CVE-2026-25477AFFiNE: Open Redirect via Regex Bypass in redirect-proxytoeverything AFFiNE
- CVE-2026-0027In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free.Google Android
- CVE-2026-0024In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missinGoogle Android
- CVE-2026-0015In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation.Google Android
- CVE-2026-0014In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation.Google Android
- CVE-2026-0012In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code.Google Android
- CVE-2026-0005In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction witGoogle Android
- CVE-2025-48644In multiple locations, there is a possible persistent denial of service due to improper input validation.Google Android
- CVE-2025-48642In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code.Google Android
- CVE-2025-48587In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation.Google Android
- CVE-2025-48585In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation.Google Android
- CVE-2024-43766In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to Invalid error handling.Google Android
- CVE-2026-0655Path Traversal on TP-Link Deco BE25TP-Link Systems Deco BE25
- CVE-2025-47384Reachable Assertion in FWQualcomm Snapdragon
- CVE-2025-47371Reachable Assertion in ModemQualcomm Snapdragon
- CVE-2026-28401NocoDB: Stored Cross-Site Scripting via Rich Text Cellsnocodb
- CVE-2026-28399NocoDB: SQL Injection via DATEADD Formulanocodb
- CVE-2026-28398NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cellsnocodb
- CVE-2026-28397NocoDB: Stored Cross-Site Scripting via Commentsnocodb
- CVE-2026-28396NocoDB: Refresh Tokens Not Revoked on Password Resetnocodb
- CVE-2026-28361NocoDB: Missing Ownership Validation in MCP Token Operationsnocodb
- CVE-2026-28360NocoDB: Plaintext Storage of Shared View Passwordsnocodb
- CVE-2026-28359NocoDB: Stored Cross-Site Scripting via Rich Text Fieldnocodb
- CVE-2026-28358NocoDB: User Enumeration via Password Reset Endpointnocodb
- CVE-2026-28357NocoDB: Stored Cross-Site Scripting via Formula Cellnocodb
- CVE-2026-23865An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an FreeType
- CVE-2025-52564Chamilo: HTML injection via open parameterchamilo-lms
- CVE-2025-52563Chamilo: Reflected XSS via page parameterchamilo-lms
- CVE-2025-52475Chamilo: Reflected XSS via keyword_inactive parameterchamilo-lms
- CVE-2025-52476Chamilo: Reflected XSS via keyword_active parameterchamilo-lms
- CVE-2025-52470Chamilo: Stored Cross-Site Scripting (XSS) via Session Category Namechamilo-lms
- CVE-2026-28412Textream Vulnerable to Uncontrolled Resource Consumption (Denial of Service)f textream
- CVE-2026-0689XIQ‑SE NAC Admin Credential Exposure via HTTP ResponseExtreme Networks ExtremeCloud IQ - Site Engine
- CVE-2026-0995An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completiArm C1 Pro
- CVE-2025-50186Chamilo: Stored XSS via Malicious CSV Filename in user_import.phpchamilo-lms
- CVE-2024-50337Chamilo: Potential unauthenticated blind SSRF via openid functionchamilo-lms
- CVE-2026-1628Mattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites.Mattermost
- CVE-2025-58406Lack of HTTP Response HeadersCGM CLININET
- CVE-2025-58405Lack of protection mechanisms against Clickjacking attacksCGM CLININET
- CVE-2025-30062SQL injection in CheckUnitCodeAndKey.plCGM CLININET
- CVE-2026-20445In MDDP, there is a possible system crash due to a race condition.MediaTek chipset
- CVE-2026-20429In display, there is a possible out of bounds read due to a missing bounds check.MediaTek chipset
- CVE-2026-20424In display, there is a possible out of bounds read due to a missing bounds check.MediaTek chipset
- CVE-2026-20444In display, there is a possible memory corruption due to a missing bounds check.MediaTek chipset
- CVE-2026-20443In display, there is a possible memory corruption due to use after free.MediaTek chipset
- CVE-2026-20442In display, there is a possible system crash due to use after free.MediaTek chipset
- CVE-2026-20441In MAE, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20440In MAE, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20439In imgsys, there is a possible system crash due to use after free.MediaTek chipset
- CVE-2026-20438In MAE, there is a possible out of bounds write due to a race condition.MediaTek chipset
- CVE-2026-20437In MAE, there is a possible system crash due to use after free.MediaTek chipset
- CVE-2026-20436In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check.MediaTek chipset
- CVE-2026-20435In preloader, there is a possible read of device unique identifiers due to a logic error.MediaTek chipset
- CVE-2026-20428In display, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20427In display, there is a possible escalation of privilege due to a missing bounds check.MediaTek chipset
- CVE-2026-20426In display, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20425In display, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2025-15597Dataease SQLBot API Endpoint assistant.py access controlDataease SQLBot
- CVE-2026-3413itsourcecode University Management System admin_single_student.php sql injectionitsourcecode University Management System
- CVE-2026-3412itsourcecode University Management System att_single_view.php cross site scriptingitsourcecode University Management System
- CVE-2026-3411itsourcecode University Management System admin_single_student_update.php sql injectionitsourcecode University Management System
- CVE-2026-3410itsourcecode Society Management System check_studid.php sql injectionitsourcecode Society Management System
- CVE-2026-3409eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injectioneosphoros-ai db-gpt
- CVE-2026-3408Open Babel CDXML File atom.cpp GetExplicitValence null pointer dereferenceOpen Babel · openbabel
- CVE-2026-3407YosysHQ yosys BLIF File rtlil.h set heap-based overflowYosysHQ yosys
- CVE-2026-3406projectworlds Online Art Gallery Shop Registration registration.php sql injectionprojectworlds Online Art Gallery Shop
- CVE-2026-3405thinkgem JeeSite Connection path traversalthinkgem JeeSite
- CVE-2026-3404thinkgem JeeSite Endpoint CasOutHandler.java xml external entity referencethinkgem JeeSite
- CVE-2026-3403PHPGurukul Student Record Management System edit-subject.php cross site scriptingPHPGurukul Student Record Management System
- CVE-2026-3402PHPGurukul Student Record Management System edit-course.php cross site scriptingPHPGurukul Student Record Management System
- CVE-2026-3401SourceCodester Web-based Pharmacy Product Management System session expirationSourceCodester Web-based Pharmacy Product Management System
- CVE-2025-65465A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote att
- CVE-2025-66880Cross Site Scripting vulnerability in Wethink Technology Inc 720yun pano-sdk 0.5.877 allows a remote attacker to execute arbitrary code via
- CVE-2026-26697code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?teacherID=.
- CVE-2026-26698code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.