Total
5507 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2012-4431 | 1 Apache | 1 Tomcat | 2026-10-09 | 4.3 MEDIUM | N/A |
| org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier. | |||||
| CVE-2026-76488 | 2026-10-08 | N/A | 6.5 MEDIUM | ||
| A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches. | |||||
| CVE-2025-58284 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 5.9 MEDIUM |
| Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality. | |||||
| CVE-2025-58285 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 5.3 MEDIUM |
| Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality. | |||||
| CVE-2025-58293 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 5.5 MEDIUM |
| Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. | |||||
| CVE-2025-58283 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 5.5 MEDIUM |
| Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality. | |||||
| CVE-2025-58282 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 2.8 LOW |
| Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality. | |||||
| CVE-2025-54654 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 6.2 MEDIUM |
| Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality | |||||
| CVE-2025-58309 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 6.8 MEDIUM |
| Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | |||||
| CVE-2025-58294 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 6.2 MEDIUM |
| Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||||
| CVE-2025-58312 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 5.1 MEDIUM |
| Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability. | |||||
| CVE-2025-64315 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 4.4 MEDIUM |
| Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity. | |||||
| CVE-2025-58315 | 1 Huawei | 1 Harmonyos | 2026-10-08 | N/A | 5.5 MEDIUM |
| Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||||
| CVE-2025-66329 | 1 Huawei | 2 Emui, Harmonyos | 2026-10-07 | N/A | 4.0 MEDIUM |
| Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability. | |||||
| CVE-2025-66325 | 1 Huawei | 2 Emui, Harmonyos | 2026-10-07 | N/A | 6.2 MEDIUM |
| Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | |||||
| CVE-2013-0248 | 1 Apache | 1 Commons Fileupload | 2026-10-07 | 3.3 LOW | 6.8 MEDIUM |
| The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack. | |||||
| CVE-2014-0050 | 2 Apache, Oracle | 3 Commons Fileupload, Tomcat, Retail Applications | 2026-10-07 | 7.5 HIGH | 7.5 HIGH |
| MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions. | |||||
| CVE-2015-3246 | 3 Libuser Project, Opensuse, Redhat | 3 Libuser, Opensuse, Enterprise Linux | 2026-10-02 | 7.2 HIGH | 7.4 HIGH |
| libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges. | |||||
| CVE-2026-101102 | 2026-10-01 | 6.5 MEDIUM | 6.3 MEDIUM | ||
| A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way. | |||||
| CVE-2006-3011 | 1 Php | 1 Php | 2026-09-23 | 4.6 MEDIUM | N/A |
| The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode. | |||||