Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.4 MEDIUM
CVE-2026-31352 — Feehi CMS Cross-Site Scripting

An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted pa…

feehi_cms | Remote | Cross-Site Scripting
Apr 06, 2026 Apr 07, 2026
Apr 06, 2026
Apr 07, 2026
4.8 MEDIUM
CVE-2026-31351 — Feehi CMS Stored Cross-Site Scripting (XSS)

An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted p…

feehi_cms | Remote | Cross-Site Scripting
Apr 06, 2026 Apr 07, 2026
Apr 06, 2026
Apr 07, 2026
5.4 MEDIUM
CVE-2026-31350 — Feehi CMS Stored Cross-Site Scripting Vulnerability

An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Page Sign param…

feehi_cms | Remote | Cross-Site Scripting
Apr 06, 2026 Apr 07, 2026
Apr 06, 2026
Apr 07, 2026
7.8 HIGH
CVE-2026-21382 — Buffer Copy Without Checking Size of Input in Power Management IC

Memory Corruption when handling power management requests with improperly sized input/output buffers.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.6 HIGH
CVE-2026-21381 — Buffer Over-read in WLAN Firmware

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2026-21380 — Use After Free in DSP Service

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2026-21378 — Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2026-21376 — Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2026-21375 — Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2026-21374 — Buffer Over-read in Camera

Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2026-21373 — Buffer Over-read in Camera

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2026-21372 — Heap-Based Buffer Overflow in Power Management IC

Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2026-21371 — Buffer Over-read in WinBlast Driver

Memory Corruption when retrieving output buffer with insufficient size validation.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.6 HIGH
CVE-2026-21367 — Buffer Over-read in WLAN Firmware

Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.1 HIGH
CVE-2025-47400 — Buffer Over-read in Computer Vision

Cryptographic issue while copying data to a destination buffer without validating its size.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
8.8 HIGH
CVE-2025-47392 — Integer Overflow or Wraparound in GPS

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2025-47391 — Stack-based Buffer Overflow in Camera Driver

Memory corruption while processing a frame request from user.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2025-47390 — Buffer Over-read in Camera

Memory corruption while preprocessing IOCTL request in JPEG driver.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
7.8 HIGH
CVE-2025-47389 — Buffer Copy Without Checking Size of Input in Automotive Platform

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
6.5 MEDIUM
CVE-2025-47374 — Use After Free in Camera Driver

Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

Apr 06, 2026 Apr 08, 2026
Apr 06, 2026
Apr 08, 2026
Showing 20 of 6576 Results