Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,413
- Last 24h
- 637
- Critical, 7 days
- 337
- Known exploited
- 1,779
97,631 results · Clear filters · Feed
-
High 7.2
@twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request t…
-
High 7.5
In the baseband, memory corruption during NAS packet processing can cause a denial of service.
-
High 8.8
Out of bound access in PPC due to race condition in global variable access
-
High 7.3
A double free vulnerability in NPU driver due to improper pointer management (941)
-
High 8.1
In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corru…
-
High 7.3
Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
-
High 7.5
In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds w…
-
High 7.5
In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, wh…
-
High 7.8
In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption,…
-
High 7.5
Incorrect authorization in Samsung framework services due to missing permission checks
-
High 8.4
Memory corruption in GPU driver due to improper validation of VMID reservation.
-
High 8.4
In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
-
High 7.5
Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
-
High 7.5
Improper handling of NAS DLTransport messages may lead to a baseband crash.
-
High 7.5
Incorrect handling of SDP payload leads to a Denial of Service
-
High 7.5
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-ser…
-
High 7.5
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, lead…
-
High 7.5
In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service
-
High 7.5
A memory corruption vulnerability caused by improper validation of messages
-
High 7.5
Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression
Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures ca…
-
High 7.5
Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression
Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can pus…
-
High 7.7
Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone
Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the b…
-
High 7.5
Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic
Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type assertion. Attackers can submit resources whose JMESPath-evaluated values yield arrays of int…
-
High 7.7
Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates
Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured priva…
-
High 8.5
Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting
Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting …
-
High 7.5
Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic
Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to by…
-
High 7.5
Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic
Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by {{- variable }} shallow s…
-
High 7.7
Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String
Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pkg/engine/apicall/apiCall.go because path.Clean treats '?' as a path character, letting the namespace regex match segments inside the query string. Users who can cr…
-
High 8.5
Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest
Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Handler that allows users with create/update permissions to trigger synchronized generate policies by spoofing internal generate.kyverno.io labels. Attackers can label a Co…
-
High 7.7
Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling
Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds PolicyExceptions into generated ValidatingAdmissionPolicies while ignoring the --enablePolicyException, --exceptionNamespace, and policy kind …
-
High 7.7
Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching
Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission controller CPU by submitting pathological wildcard patterns. Attackers can create a Policy with crafted match and exclude names evaluat…
-
High 7.7
Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop
Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. Attackers can create resources whose annotations re-introduce …
-
High 7.5
Continuously sending control‑plane messages causes the baseband to crashes.
-
High 8.1
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading i…
-
High 7.5
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the com.d…
-
High 7.3
Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection
A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0. This issue affects some unknown processing of the file /ahira/login.php. Performing a manipulation of the argument branch results in sql injection. The atta…
-
High 7.3
Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection
A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible …
-
High 8.8
Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation
Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header to the last occurrence instead of the first, diverging from core git's resolution behavior, while Poetry 2.5.1 ships thi…
-
High 8.8
VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path)
VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.30, the Unix, macOS, and FreeBSD serialization paths in src/Platform/Serializer.cpp and src/Volume/VolumePassword.cpp accept untrusted length and count values when deser…
-
High 7.3
Campcodes Complete Advance Loan Management System banner.php move_uploaded_file unrestricted upload
A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function move_uploaded_file of the file /loan/application/banner.php. Such manipulation of the argument image leads to unrestricted upload. T…