Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.8 HIGH
CVE-2026-18199 — Remote Code Execution Vulnerability

Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.

Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
7.5 HIGH
CVE-2026-120349 — dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection

A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of the file /var/www/html/zzmob/index.php of the component Mobile Site Director…

Remote | Injection
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
7.5 HIGH
CVE-2026-101186 — Window Module Denial of Service Vulnerability

DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Remote | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.9 MEDIUM
CVE-2026-101185 — Peripheral Module Out-of-Bounds Read Vulnerability

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

harmonyos | Information Disclosure
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.9 MEDIUM
CVE-2026-101183 — Location Service Use-After-Free Vulnerability

UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Memory Corruption
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.9 MEDIUM
CVE-2026-101182 — Location Service Race Condition Vulnerability

Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Race Condition
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.5 MEDIUM
CVE-2026-101181 — WLAN Module Improper Authorization Vulnerability

Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect service confidentiality.

harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
4.3 MEDIUM
CVE-2026-101180 — File Parsing Module Denial of Service Vulnerability

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Remote | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
4.7 MEDIUM
CVE-2026-101179 — File Preview Module Buffer Overflow

Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Remote | Memory Corruption
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
3.7 LOW
CVE-2026-101177 — Optimizer Module Information Disclosure Vulnerability

Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

emui harmonyos | Remote | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
7.1 HIGH
CVE-2026-101176 — Event Notification Management Module Improper Authorization

Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

emui harmonyos | Remote | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
4.3 MEDIUM
CVE-2026-101175 — ArkWeb Null Pointer Dereference

Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Remote | Memory Corruption
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.7 MEDIUM
CVE-2026-101174 — DSoftBus Denial of Service Vulnerability

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
6.5 MEDIUM
CVE-2026-101173 — DSoftBus Denial of Service Vulnerability

DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
6.2 MEDIUM
CVE-2026-101172 — Graphics Module Improper Access Control

Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.

harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
3.6 LOW
CVE-2026-101171 — Background Task Management Module Authorization Bypass

Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
4.0 MEDIUM
CVE-2026-101170 — Product File Parsing Module Denial of Service Vulnerability

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.

harmonyos | Denial of Service
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
5.5 MEDIUM
CVE-2026-101184 — Bluetooth Module Permission Control Vulnerability

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.

emui harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
6.6 MEDIUM
CVE-2026-101178 — Autofill Service Module Improper Authorization

Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

emui harmonyos | Authorization
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
0.0 NA
CVE-2026-103310 — PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Pay…

The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the merchant secret is unset, which is the default state, allowing…

| Authentication
Nov 02, 2026 Nov 02, 2026
Nov 02, 2026
Nov 02, 2026
Showing 20 of 16442 Results