CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- code-projects faculty management systemcode-projects Faculty Management System subject-print.php sql injection6.9 Medium
- huawei harmonyosOut-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this...5.1 Medium
- huawei harmonyosOut-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this...10.0 Critical
- code-projects vehicle showroom management systemcode-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection6.9 Medium
- unknown product filter for woocommerce by wbwProduct Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi8.6 High
- unknown form maker by 10webForm Maker < 1.15.38 - SQL Injection6.8 Medium
- code-projects vehicle showroom management systemcode-projects Vehicle Showroom Management System Login_check.php sql injection6.9 Medium
- code-projects lost and found thing managementcode-projects Lost and Found Thing Management addcat.php sql injection6.9 Medium
- code-projects lost and found thing managementcode-projects Lost and Found Thing Management catageory.php sql injection6.9 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers...6.6 Medium
- samsung android, samsung mobile devices +1 moreExposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent...5.1 Medium
- samsung escargotInteger overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined...5.1 Medium
- samsung cameraImproper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to...5.1 Medium
- samsung galaxy wearableIncorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers...6.9 Medium
- samsung android, samsung mobile devices +1 moreExternal control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged...6.8 Medium
- samsung android, samsung mobile devices +1 moreIncorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1...5.4 Medium
- samsung android, samsung mobile devices +1 moreImproper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows...4.1 Medium
- samsung android, samsung mobile devices +1 moreImproper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows...4.4 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers...4.7 Medium
- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1...5.2 Medium
- samsung escargotAccess of resource using incompatible type ('type confusion') vulnerability in Samsung Open...6.9 Medium
- samsung escargotOut-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure...6.5 Medium
- samsung escargotInteger overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue...8.1 High
- samsung escargotOut-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This...7.4 High
- code-projects simple chatboxcode-projects Simple ChatBox Endpoint insert.php sql injection6.9 Medium
- samsung escargotOut-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure...6.7 Medium
- samsung escargotHeap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds...7.4 High
- code-projects simple chatboxcode-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure6.9 Medium
- code-projects simple chatboxcode-projects Simple ChatBox Endpoint insert.php cross site scripting5.3 Medium
- huawei harmonyosBoundary-unlimited vulnerability in the application read module. Impact: Successful exploitation...6.8 Medium
- huawei harmonyosOut-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this...6.7 Medium
- huawei harmonyosRace condition vulnerability in the power consumption statistics module. Impact: Successful...6.3 Medium
- huawei harmonyosRace condition vulnerability in the thermal management module. Impact: Successful exploitation of...6.3 Medium
- huawei emui, harmonyos +1 moreUAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability...5.9 Medium
- huawei harmonyosUAF vulnerability in the communication module. Impact: Successful exploitation of this...4.1 Medium
- huawei harmonyosUAF vulnerability in the communication module. Impact: Successful exploitation of this...4.7 Medium
- dynabook inc. drfec.sys, tosrfec.sys +1 moreBluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow...8.4 High
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this...5.7 Medium
- huawei emui, harmonyos +1 moreUAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability...5.7 Medium
- totolink n300rhTotolink N300RH upgrade.so setUpgradeUboot os command injection6.9 Medium
- huawei harmonyosUAF vulnerability in the screen management module. Impact: Successful exploitation of this...2.5 Low
- huawei harmonyosUAF vulnerability in the communication module. Impact: Successful exploitation of this...7.3 High
- huawei emui, harmonyos +1 morePermission bypass vulnerability in the LBS module. Impact: Successful exploitation of this...7.7 High
- huawei emui, harmonyos +1 moreVulnerability of improper permission control in the theme setting module. Impact: Successful...6.9 Medium
- huawei harmonyosDouble free vulnerability in the multi-mode input system. Impact: Successful exploitation of this...5.6 Medium
- huawei harmonyosAccess control vulnerability in the memo module. Impact: Successful exploitation of this...4.1 Medium
- huawei harmonyosStack overflow vulnerability in the media platform. Impact: Successful exploitation of this...6.1 Medium
- totolink a800rTotolink A800R app.so setAppEasyWizardConfig buffer overflow8.7 High
- huawei harmonyosRace condition vulnerability in the event notification module. Impact: Successful exploitation of...2.2 Low
- Show moreLoading…