Export limit exceeded: 425467 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (425467 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-121353 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 10 Critical |
| Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121887 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.9 Critical |
| Adobe Connect is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121889 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 10 Critical |
| Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121892 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.9 Critical |
| Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121900 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 8.3 High |
| Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL commands. Exploitation of this issue does not require user interaction. | ||||
| CVE-2026-114371 | 1 Adobe | 3 Adobe Experience Manager, Experience Manager, Experience Manager Cloud Service | 2026-11-12 | 9.9 Critical |
| Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121349 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.6 Critical |
| Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-121902 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 9.4 Critical |
| Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially compromising the confidentiality, integrity, and availability of the application. Exploitation of this issue does not require user interaction. | ||||
| CVE-2026-121351 | 1 Adobe | 1 Adobe Connect | 2026-11-12 | 10 Critical |
| Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. | ||||
| CVE-2026-20600 | 2 Mediatek, Mediatek, Inc. | 48 Mediatek Chipset, Mt2716, Mt2716 Firmware and 45 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01416152; Issue ID: MSV-7924. | ||||
| CVE-2026-68588 | 2 Mediatek, Mediatek, Inc. | 52 Mediatek Chipset, Mt2716, Mt2716 Firmware and 49 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01334054 / MOLY01312486; Issue ID: MSV-7920. | ||||
| CVE-2026-68589 | 2 Mediatek, Mediatek, Inc. | 114 Mediatek Chipset, Mt2716, Mt2716 Firmware and 111 more | 2026-11-12 | 6.7 Medium |
| In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01320076; Issue ID: MSV-6889. | ||||
| CVE-2026-68590 | 2 Mediatek, Mediatek, Inc. | 114 Mediatek Chipset, Mt2716, Mt2716 Firmware and 111 more | 2026-11-12 | 5.3 Medium |
| In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01387180; Issue ID: MSV-5152. | ||||
| CVE-2026-68591 | 2 Mediatek, Mediatek, Inc. | 46 Mediatek Chipset, Mt2737, Mt2737 Firmware and 43 more | 2026-11-12 | 6.7 Medium |
| In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958. | ||||
| CVE-2026-20573 | 2 Mediatek, Mediatek, Inc. | 72 Mediatek Chipset, Mt2735, Mt2735 Firmware and 69 more | 2026-11-12 | 6.7 Medium |
| In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431412; Issue ID: MSV-9923. | ||||
| CVE-2026-20574 | 2 Mediatek, Mediatek, Inc. | 72 Mediatek Chipset, Mt2735, Mt2735 Firmware and 69 more | 2026-11-12 | 6.7 Medium |
| In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431400; Issue ID: MSV-9922. | ||||
| CVE-2026-20575 | 2 Mediatek, Mediatek, Inc. | 58 Mediatek Chipset, Mt6739, Mt6739 Firmware and 55 more | 2026-11-12 | 6.7 Medium |
| In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-9921. | ||||
| CVE-2026-20576 | 2 Mediatek, Mediatek, Inc. | 30 Mediatek Chipset, Mt6789, Mt6789 Firmware and 27 more | 2026-11-12 | 6.7 Medium |
| In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920. | ||||
| CVE-2026-20577 | 2 Mediatek, Mediatek, Inc. | 52 Mediatek Chipset, Mt2716, Mt2716 Firmware and 49 more | 2026-11-12 | 4.4 Medium |
| In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01880753; Issue ID: MSV-9866. | ||||
| CVE-2026-20578 | 2 Mediatek, Mediatek, Inc. | 48 Mediatek Chipset, Mt2716, Mt2716 Firmware and 45 more | 2026-11-12 | 5.3 Medium |
| In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846. | ||||