Archive
8 September 2026
Vulnerabilities first published on this day (UTC), newest first.
1,568 results · Feed
-
High 7.3
In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input v…
-
High 7.8
In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logi…
-
High 7.8
In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a miss…
-
High 8.8CVE-2026-28609 Public exploit
In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to r…
-
High 7.8
In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused de…
-
Critical 9.8
In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the c…
-
High 7.5
In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execu…
-
High 7.8
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private fi…
-
High 7.8
In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due…
-
High 7.8
In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deput…
-
High 7.8
In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error i…
-
Medium 5.5
In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource…
-
High 7.8
In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local es…
-
High 7.8
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient …
-
High 7.8
In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This co…
-
Medium 5.5
In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to …
-
High 7.8
In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical er…
-
Low 3.3
In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of dev…
-
High 7.8
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead …
-
High 7.8
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error…
-
High 7.8
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to …
-
Low 3.3
In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a m…
-
High 7.3
ningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentials
A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli_connect of the file config/database.php of the component Database Connection. This manipulatio…
-
Medium 5.3
ningzichun Student Management System Backup example.7z information disclosure
A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. Th…
-
High 8.4
AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.
-
High 8.4
AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards ad…
-
Medium 5.9
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-controlled fetched conte…
-
Medium 5.3
AVEVA Pipeline Integrity Monitor Missing Authorization
The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted.
-
Medium 4.7
AVEVA Pipeline Integrity Monitor cross-site scripting
The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.
-
Low 3.7
aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insuffici…
-
Medium 5.0
Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized …
-
High 7.4
Photoshop Mobile | Session Fixation (CWE-384)
Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Explo…
-
Low 3.1
InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery (SSRF) vulnerability in the file upload functionality (`system/core/uploader.php` at lines 509-532). When the "upload from URL" feature…
-
High 7.8
Microsoft Word Remote Code Execution Vulnerability
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
-
High 7.4
Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
-
Medium 5.5
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
High 7.8
Microsoft Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
-
High 7.0
.NET Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.