All CVEs — page 369 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• MEDIUM 5.4CVE-2026-103590public exploit available2026-09-30
• MEDIUM 5.4CVE-2026-103589public exploit available2026-09-30
• MEDIUM 5.4CVE-2026-103588public exploit available2026-09-30
• MEDIUM 5.4CVE-2026-103587public exploit available2026-09-30
• UNSCOREDCVE-2026-1035852026-09-30
• UNSCOREDCVE-2026-1035842026-09-30
• MEDIUM 6.1CVE-2026-470962026-09-30
• MEDIUM 6.5CVE-2026-103001public exploit available2026-09-30
• UNSCOREDCVE-2026-1012832026-09-30
• CRITICAL 9.1CVE-2026-921732026-09-30

  The flaw allows an attacker to send a privileged PendingIntent to an arbitrary application, enabling impersonation of the com.oculus.vrshell package and its signed packages, posing a significant security risk.

• HIGH 8.8CVE-2026-921722026-09-30

  The flaw allows an attacker to send a privileged PendingIntent to an arbitrary application, enabling impersonation of the com.oculus.horizon package within the OS.

• CRITICAL 9.8CVE-2026-51872public exploit available2026-09-30

  Devika v1.0 is vulnerable to Code Injection, allowing attackers to execute arbitrary code via the Runner.run_code function, leading to full system compromise.

• CRITICAL 9.8CVE-2026-51871public exploit available2026-09-30

  Devika v1.0 is vulnerable to arbitrary code execution due to direct execution of LLM-generated content, allowing attackers to inject malicious code.

• CRITICAL 9.8CVE-2026-51870public exploit available2026-09-30

  The flaw allows command execution via the /tutorbot/agent/tools/shell.py:ExecTool.execute module, enabling an attacker to run arbitrary commands on the system.

• UNSCOREDCVE-2026-51869public exploit available2026-09-30
• CRITICAL 9.8CVE-2026-51867public exploit available2026-09-30

  The flaw allows an attacker to bypass access controls and gain unauthorized access to sensitive data, which can lead to data breaches and loss of confidentiality.

• CRITICAL 9.8CVE-2026-51866public exploit available2026-09-30

  The flaw allows an attacker to upload a skill that can later be executed, leading to remote code execution.

• CRITICAL 9.1CVE-2026-51864public exploit available2026-09-30

  This flaw allows a remote attacker to perform directory traversal and write files outside the intended workspace, leading to potential data leakage or system compromise.

• UNSCOREDCVE-2026-51862public exploit available2026-09-30
• CRITICAL 9.8CVE-2026-51861public exploit available2026-09-30

  The flaw allows code injection, enabling an attacker to execute arbitrary code, leading to potential system compromise.

• HIGH 7.5CVE-2026-51860public exploit available2026-09-30

  The flaw allows attackers to perform directory traversal attacks by manipulating input in the task_exec.py file, potentially leading to unauthorized access to sensitive files on the server.

• CRITICAL 9.1CVE-2026-51859public exploit available2026-09-30

  The flaw allows directory traversal, enabling attackers to access sensitive files. This matters because it can lead to data exposure and compromise.

• CRITICAL 9.8CVE-2026-51858public exploit available2026-09-30

  This flaw allows prompt-driven shell command execution without an approval boundary, enabling attackers to execute arbitrary commands with potentially high impact.

• CRITICAL 9.8CVE-2026-51857public exploit available2026-09-30

  This flaw allows for remote code execution through the execution of Python code via SubprocessInterpreter, leading to potential unauthorized access and control of the system.

• CRITICAL 9.8CVE-2026-51856public exploit available2026-09-30

  The flaw allows a remote user to execute arbitrary Python code on the server, leading to Remote Code Execution (RCE). This is critical because it can enable full control over the server's functionality and data.