Browse All CVEs
50,486 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2022-49870 |
high | 7.1 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: capabilities: fix und | |
CVE-2022-49865 |
high | 7.1 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: ipv6: addrlabel: fix | |
CVE-2022-49847 |
medium | 5.5 | 0.0017 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am | |
CVE-2022-49841 |
medium | 5.5 | 0.0020 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: serial: imx: Add miss | |
CVE-2022-49838 |
medium | 5.5 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: sctp: clear out_curr | |
CVE-2022-49836 |
medium | 5.5 | 0.0020 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: siox: fix possible me | |
CVE-2022-49835 |
medium | 5.5 | 0.0020 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potent | |
CVE-2022-49832 |
medium | 5.5 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: | |
CVE-2022-49830 |
medium | 5.5 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm/drv: Fix potentia | |
CVE-2022-49829 |
medium | 5.5 | 0.0017 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: fix fe | |
CVE-2022-49827 |
medium | 5.5 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm: Fix potential nu | |
CVE-2022-49825 |
medium | 5.5 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport | |
CVE-2022-49824 |
medium | 5.5 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport | |
CVE-2022-49823 |
medium | 5.5 | 0.0022 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport | |
CVE-2022-49822 |
medium | 5.5 | 0.0020 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix connections | |
CVE-2022-49821 |
medium | 5.5 | 0.0020 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible m | |
CVE-2026-19879 |
medium | 5.3 | 0.0039 | 2026-11-05 | A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path | |
CVE-2026-19617 |
medium | 5.5 | 0.0016 | 2026-11-05 | A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager | |
CVE-2026-19548 |
medium | 5.5 | 0.0017 | 2026-11-05 | Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in | |
CVE-2026-19404 |
medium | 6.5 | 0.0043 | 2026-11-05 | A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replicatio | |
CVE-2026-19391 |
medium | 6.5 | 0.0024 | 2026-11-05 | A flaw was found in insights-core where the password redaction layer fails to recognize cr | |
CVE-2026-19079 |
medium | 4.4 | 0.0011 | 2026-11-05 | A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfile | |
CVE-2026-18728 |
medium | 6.5 | 0.0031 | 2026-11-05 | A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` compo | |
CVE-2026-18727 |
medium | 6.5 | 0.0029 | 2026-11-05 | A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an intege | |
CVE-2026-18726 |
medium | 6.5 | 0.0031 | 2026-11-05 | A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same lo | |
CVE-2026-18663 |
medium | 5.9 | 0.0051 | 2026-11-05 | A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function frees the par | |
CVE-2026-18651 |
medium | 5.4 | 0.0028 | 2026-11-05 | A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server ins | |
CVE-2026-18495 |
medium | 6.1 | 0.0012 | 2026-11-05 | A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` | |
CVE-2026-18369 |
medium | 5.8 | 0.0038 | 2026-11-05 | A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator acce | |
CVE-2026-18358 |
high | 7.5 | 0.0066 | 2026-11-05 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the | |
CVE-2026-18047 |
medium | 6.5 | 0.0049 | 2026-11-05 | A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use | |
CVE-2026-16768 |
medium | 5.3 | 0.0040 | 2026-11-05 | A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel value | |
CVE-2026-16730 |
medium | 5.5 | 0.0015 | 2026-11-05 | A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE | |
CVE-2026-16560 |
medium | 5.3 | 0.0040 | 2026-11-05 | A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contain | |
CVE-2026-16531 |
medium | 5.3 | 0.0057 | 2026-11-05 | An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP p | |
CVE-2026-16530 |
medium | 6.5 | 0.0061 | 2026-11-05 | A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker ca | |
CVE-2026-116789 |
high | 7.4 | 0.0018 | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from pr | |
CVE-2026-116787 |
high | 7.5 | 0.0048 | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from pr | |
CVE-2026-116786 |
high | 8.8 | 0.0045 | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from pr | |
CVE-2026-116785 |
critical | 9.1 | 0.0109 | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from pr | |
CVE-2026-116781 |
medium | 5.3 | 0.0027 | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from pr | |
CVE-2026-2604 |
medium | 5.6 | 0.0031 | 2026-11-05 | A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressboo | |
CVE-2026-2436 |
high | 8.2 | 0.0046 | 2026-11-05 | A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free | |
CVE-2026-2369 |
critical | 9.1 | 0.0047 | 2026-11-05 | A flaw was found in libsoup. An integer underflow vulnerability occurs when processing con | |
CVE-2026-2340 |
medium | 6.5 | 0.0095 | 2026-11-05 | A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, | |
CVE-2026-116784 |
high | 7.5 | 0.0045 | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from pr | |
CVE-2026-116780 |
low | 2.7 | 0.0022 | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from pr | |
CVE-2026-116779 |
critical | 9.8 | 0.0247 | 2026-11-05 | KEV 2 PoC | SignalWire FreeSwitch contains a code injection vulnerability that permits configuration a |
CVE-2026-76580 |
medium | 6.3 | 0.0019 | 2026-11-05 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-19134 |
high | 7.1 | 0.0030 | 2026-11-05 | A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse En |