Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (2402 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-65198 1 Huawei 1 Openubmc 2026-10-22 8.6 High
Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization `manifest/build/customization/default_password.lua` sets `AuthenticationKey == EncryptionKey == 7df2f29369e3ac3245b2c9d46b67a0ecd055197e41808a34ef325db2f6422581` for the iBMC product build, and the community seed `account/manufacture/default_password.lua` sets both to `7a2f5b86f20233ec7b7bef49643fbf34d86d0cbf6f1f8f5c52d4f30d4536938b`. These are shipped constants, not per-unit values, and they are not rotated by the Administrator password reset, so they survive account provisioning. This is especially dangerous considering that SNMP access is mapped to full device administration privileges, including system reset and firmware upgrades.
CVE-2016-3081 3 Apache, Huawei, Oracle 34 Struts, Agile Controller-campus, Agile Controller-campus Firmware and 31 more 2026-10-09 8.1 High
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
CVE-2020-8840 6 Debian, Fasterxml, Huawei and 3 more 20 Debian Linux, Jackson-databind, Oceanstor 9000 and 17 more 2026-10-08 9.8 Critical
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
CVE-2026-81645 1 Huawei 1 Harmonyos 2026-09-24 5.9 Medium
Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.
CVE-2026-49309 1 Huawei 2 Emui, Harmonyos 2026-09-10 4.8 Medium
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-49310 1 Huawei 1 Harmonyos 2026-09-10 8.6 High
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-49312 1 Huawei 1 Harmonyos 2026-09-10 4 Medium
Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-49311 1 Huawei 1 Harmonyos 2026-09-10 6.2 Medium
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-49314 1 Huawei 1 Harmonyos 2026-09-10 7.3 High
OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-81644 1 Huawei 1 Harmonyos 2026-09-10 4.3 Medium
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-81646 1 Huawei 1 Harmonyos 2026-09-10 5.9 Medium
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-81647 1 Huawei 1 Harmonyos 2026-09-10 5.3 Medium
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-49315 1 Huawei 2 Emui, Harmonyos 2026-09-10 7.1 High
DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41987 1 Huawei 2 Emui, Harmonyos 2026-09-10 6.2 Medium
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-49313 1 Huawei 1 Harmonyos 2026-09-10 5.5 Medium
Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-49303 1 Huawei 2 Emui, Harmonyos 2026-08-28 5.1 Medium
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41983 1 Huawei 1 Harmonyos 2026-08-17 4.3 Medium
Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-49307 1 Huawei 1 Harmonyos 2026-08-17 6.2 Medium
Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-58560 1 Huawei 1 Harmonyos 2026-08-17 4 Medium
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-58561 1 Huawei 1 Harmonyos 2026-08-17 4 Medium
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.