Archive
13 April 2026
Vulnerabilities first published on this day (UTC), newest first.
79 results · Clear filters · Feed
-
Medium 5.1
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affec…
-
Medium 5.1CVE-2026-21014 Public exploit
Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. Us…
-
Medium 6.9CVE-2026-21013 Public exploit
Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive i…
-
Medium 6.8CVE-2026-21012 Public exploit
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create …
-
Medium 5.4CVE-2026-21011 Public exploit
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attacke…
-
Medium 4.1CVE-2026-21009 Public exploit
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass…
-
Medium 4.4CVE-2026-21007 Public exploit
Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to b…
-
Medium 4.7CVE-2026-21006 Public exploit
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden no…
-
Medium 5.2CVE-2026-21003 Public exploit
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attac…
-
Medium 6.9
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Poin…
-
Medium 6.5
Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escar…
-
Medium 6.7
Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escar…
-
Medium 5.3
code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure
A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP of the file chatbox.sql of the component Endpoint. Performing a manipulation results in file and directory information exposure. It is poss…
-
Medium 4.3
code-projects Simple ChatBox Endpoint insert.php cross site scripting
A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerability is an unknown functionality of the file /chatbox/insert.php of the component Endpoint. Such manipulation of the argument msg leads to cross site scripting…
-
Medium 6.8
Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability …
-
Medium 6.7
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 6.3
Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulner…
-
Medium 6.3
Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability ma…
-
Medium 5.9
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability …
-
Medium 4.1
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availab…
-
Medium 4.7
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availab…
-
Medium 6.7
Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vulnerability. An attacker may e…
-
Medium 5.7
Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affe…
-
Medium 5.7
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability …
-
Medium 6.9
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulne…
-
Medium 5.6
Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 4.1
Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect avai…
-
Medium 6.1
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect av…
-
Medium 6.3
Stored Cross Site Scripting in NightWolf Penetration Testing Platform
Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser
-
Medium 4.3
code-projects Simple Laundry System checkupdatestatus.php cross site scripting
A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. The manipulation of the argument serviceId leads to cross site scripting. It is possible to initiate the attack remotel…
-
Medium 6.3
farion1231 cc-switch ProxyServer server.rs cross-domain policy
A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is some unknown functionality of the file src-tauri/src/proxy/server.rs of the component ProxyServer. The manipulation results in permissive cross-domain policy w…
-
Medium 6.2
Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service co…
-
Medium 6.3
danielmiessler Personal_AI_Infrastructure parse_url.ts os command injection
A vulnerability was determined in danielmiessler Personal_AI_Infrastructure up to 2.3.0. Affected is an unknown function of the file Skills/Parser/Tools/parse_url.ts. Executing a manipulation can lead to os command injection. The attack may be launched remote…
-
Medium 5.4
Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 …
-
Medium 5.4
Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper hand…
-
Medium 4.0CVE-2026-33555 Public exploit
An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches…
-
Medium 6.2CVE-2026-29628 Public exploit
A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to caus…
-
Medium 6.5CVE-2026-31280 Public exploit
An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to caus…
-
Medium 6.1
A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly ne…