Browse CVEs

MEDIUM 6.9 CVE-2026-21054 Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data. Mitigation only Fix from $1,6002026-07-10 HIGH 8.5 CVE-2026-21055 Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby … Mitigation only Fix from $1,9502026-07-10 MEDIUM 5.1 CVE-2026-21053 Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox. Mitigation only Fix from $1,6002026-07-10 MEDIUM 6.8 CVE-2026-21052 Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege. Mitigation only Fix from $1,6002026-07-10 MEDIUM 5.1 CVE-2026-21051 Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings. Mitigation only Fix from $1,6002026-07-10 MEDIUM 5.1 CVE-2026-21050 Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information. No fix yet Fix from $1,6002026-07-10 MEDIUM 5.8 CVE-2026-21044 Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the appl… No fix yet Fix from $1,6002026-07-10 HIGH 8.4 CVE-2026-21049 Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code. Mitigation only Fix from $1,9502026-07-10 HIGH 8.3 CVE-2026-21048 Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bou… Mitigation only Fix from $1,9502026-07-10 HIGH 8.4 CVE-2026-21046 Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arb… Mitigation only Fix from $1,9502026-07-10 HIGH 8.3 CVE-2026-21045 Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bo… Mitigation only Fix from $1,9502026-07-10 MEDIUM 6.7 CVE-2026-21043 Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege. Mitigation only Fix from $1,6002026-07-10 MEDIUM 6.9 CVE-2026-21041 Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information. Mitigation only Fix from $1,6002026-07-10 MEDIUM 6.9 CVE-2026-21040 Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs. Mitigation only Fix from $1,6002026-07-10 MEDIUM 6.9 CVE-2026-21039 Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings. Mitigation only Fix from $1,6002026-07-10 MEDIUM 6.3 CVE-2026-15332 A security flaw has been discovered in zhayujie CowAgent up to 2.1.0. The impacted element is an unknown function of the file channel/channel.py of t… Mitigation only Fix from $1,6002026-07-10 HIGH 8.4 CVE-2026-21042 Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code. Mitigation only Fix from $1,9502026-07-10 MEDIUM 5.3 CVE-2026-15302 The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header.… Mitigation only Fix from $1,6002026-07-10 MEDIUM 6.4 CVE-2026-15301 The BuddyHolis TableSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘placeholder’ parameter in all versions up to, a… Mitigation only Fix from $1,6002026-07-10 MEDIUM 6.4 CVE-2026-15299 The Animation Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'weather_style' and 'move_direction' par… Mitigation only Fix from $1,6002026-07-10 CRITICAL 9.1 CVE-2026-15300 The GEO my WP plugin for WordPress was vulnerable to SQL Injection via the 'distance', 'lat', and 'lng' parameters in versions up to, and including, … Mitigation only Fix from $2,3002026-07-10 HIGH 7.2 CVE-2026-15298 The TelSender plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting in all versions up to, and including, 1.14.14. This is due to insu… Mitigation only Fix from $1,9502026-07-10 MEDIUM 6.1 CVE-2026-15297 The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) plugin for WordPress is vulnerable to Reflected Cross-Site Sc… Mitigation only Fix from $1,6002026-07-10 MEDIUM 6.4 CVE-2026-15296 The affiliate-toolkit – WP Affiliate Plugin with Amazon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'atkp_prod… No fix yet Fix from $1,6002026-07-10 MEDIUM 6.4 CVE-2026-15292 The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in the 'sudoku-sc' shortcode in… Mitigation only Fix from $1,6002026-07-10 MEDIUM 5.9 CVE-2026-15289 The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpdevart_id’ parameter in al… Mitigation only Fix from $1,6002026-07-10 HIGH 8.0 CVE-2026-15293 The WP Business Intelligence Lite plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.0. This is due… Mitigation only Fix from $1,9502026-07-10 HIGH 7.5 CVE-2026-15291 The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including… Mitigation only Fix from $1,9502026-07-10 HIGH 7.5 CVE-2026-15290 The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable… Mitigation only Fix from $1,9502026-07-10 MEDIUM 6.5 CVE-2026-15287 The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based SQL Injection via the order_by parameter in all ve… Mitigation only Fix from $1,6002026-07-10