Export limit exceeded: 411161 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (411161 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-119923 | 2 Amazon, Aws | 2 Amazon Aurora Postgresql With Babelfish, Babelfish-for-postgresql | 2026-11-06 | 9.8 Critical |
| A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS commands as the database process user via a specially crafted malformed TDS prelogin packet to the TDS port. This record consolidates a related NULL-pointer-dereference finding in the same prelogin parser. To remediate this issue, we recommend users upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 or later. As a workaround, restrict network access to the TDS port (default 1433). Customers using Amazon Aurora PostgreSQL with Babelfish should upgrade their cluster to Aurora PostgreSQL 13.9.16 (1.5.5), 13.23.3 (1.17.2), 14.6.16 (2.3.5), 14.17.8 (2.12.4), 14.18.6 (2.13.3), 14.19.5 (2.14.2), 14.20.5 (2.15.2), 14.22.3 (2.16.1), 14.23.1 (2.17.0), 15.10.8 (3.8.4), 15.12.8 (3.9.4), 15.13.6 (3.10.3), 15.14.5 (3.11.2), 15.15.5 (3.12.2), 15.17.3 (3.13.1), 15.18.1 (3.14.0), 16.8.8 (4.5.5), 16.9.6 (4.6.3), 16.10.5 (4.7.2), 16.11.5 (4.8.2), 16.13.3 (4.9.1), 16.14.1 (4.10.0), 17.4.8 (5.1.4), 17.5.6 (5.2.3), 17.6.5 (5.3.2), 17.7.5 (5.4.2), 17.9.3 (5.5.1), 17.10.1 (5.6.0), 18.3.4 (6.0.2), 18.4.1 (6.1.0) or later, and apply any pending maintenance to ensure they are on the latest patch. | ||||
| CVE-2026-106141 | 2026-11-06 | 5.4 Medium | ||
| Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-angular-editor) in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link or image with an unsafe URL in the Editor content, which runs when the user interacts with it. | ||||
| CVE-2026-106128 | 1 Progress | 1 Kendo Ui For Vue | 2026-11-06 | 4.1 Medium |
| Prototype Pollution in @progress/kendo-vue-common in Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0 allows a high-privileged attacker who can control a field path processed by components such as the Scheduler to modify the prototype of built-in objects, resulting in a limited impact on confidentiality, integrity, and availability. | ||||
| CVE-2026-101533 | 1 Oracle | 1 Edi Gateway | 2026-11-06 | 6.6 Medium |
| Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in takeover of Oracle EDI Gateway. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-69050 | 1 Samsung Semiconductor | 6 Exynos 1480, Exynos 1580, Exynos 1680 and 3 more | 2026-11-06 | N/A |
| Out-of-bounds memory access in a device driver due to improper resource state tracking. | ||||
| CVE-2026-69066 | 1 Samsung Semiconductor | 5 Exynos 1480, Exynos 1580, Exynos 2200 and 2 more | 2026-11-06 | N/A |
| Memory corruption in GPU driver due to improper validation of VMID reservation. | ||||
| CVE-2026-69002 | 1 Samsung Semiconductor | 4 Exynos 1580, Exynos 1680, Exynos 2500 and 1 more | 2026-11-06 | N/A |
| Incorrect authorization in Samsung framework services due to missing permission checks | ||||
| CVE-2026-68991 | 1 Samsung Semiconductor | 2 Exynos 1480, Exynos 2400 | 2026-11-06 | N/A |
| In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition. | ||||
| CVE-2026-68990 | 1 Samsung Semiconductor | 6 Exynos 1480, Exynos 1580, Exynos 1680 and 3 more | 2026-11-06 | N/A |
| In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation. | ||||
| CVE-2026-69025 | 1 Samsung Semiconductor | 2 Exynos 1480, Exynos 2400 | 2026-11-06 | N/A |
| In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service | ||||
| CVE-2026-69068 | 1 Samsung Semiconductor | 2 Exynos Modem 5300, Exynos Modem 5400 | 2026-11-06 | N/A |
| Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. | ||||
| CVE-2026-69006 | 1 Samsung Semiconductor | 15 Exynos 1280, Exynos 1330, Exynos 1380 and 12 more | 2026-11-06 | N/A |
| Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. | ||||
| CVE-2026-68985 | 1 Samsung Semiconductor | 3 Exynos 1280, Exynos 1380, Exynos 2200 | 2026-11-06 | N/A |
| In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service. | ||||
| CVE-2026-69005 | 1 Samsung Semiconductor | 6 Exynos 1480, Exynos 1580, Exynos 1680 and 3 more | 2026-11-06 | N/A |
| Integer overflow in NPU driver parameter processing due to insufficient bounds checking. | ||||
| CVE-2026-68984 | 1 Samsung Semiconductor | 10 Exynos 1280, Exynos 1380, Exynos 1480 and 7 more | 2026-11-06 | 7.8 High |
| In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. | ||||
| CVE-2026-48183 | 1 Samsung Semiconductor | 6 Exynos 1480, Exynos 1580, Exynos 1680 and 3 more | 2026-11-06 | N/A |
| Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions | ||||
| CVE-2026-68994 | 1 Samsung Semiconductor | 4 Exynos 1480, Exynos 1580, Exynos 2400 and 1 more | 2026-11-06 | N/A |
| A double free vulnerability in NPU driver due to improper pointer management (941) | ||||
| CVE-2026-68993 | 1 Samsung Semiconductor | 2 Exynos 1480, Exynos 2400 | 2026-11-06 | N/A |
| A double free vulnerability in NPU driver due to improper pointer management (940) | ||||
| CVE-2026-48186 | 1 Samsung Semiconductor | 13 Exynos 1280, Exynos 1330, Exynos 1380 and 10 more | 2026-11-06 | N/A |
| Improper handling of messages before AS security activation can cause unexpected behavior | ||||
| CVE-2026-48178 | 1 Samsung Semiconductor | 4 Exynos 2200, Exynos 2400, Exynos 2500 and 1 more | 2026-11-06 | N/A |
| Out of bound access in PPC due to race condition in global variable access | ||||