Browse All CVEs
10,727 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-98095 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast | |
CVE-2026-98097 |
medium | 5.3 | 0.0031 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send rando | |
CVE-2026-98098 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref | |
CVE-2026-98099 |
medium | 4.7 | 0.0009 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_ | |
CVE-2026-98113 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unm | |
CVE-2026-98114 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL | |
CVE-2026-98119 |
medium | 5.5 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffer | |
CVE-2026-98120 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref | |
CVE-2026-98121 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fi | |
CVE-2026-98123 |
medium | 5.5 | 0.0009 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup | |
CVE-2026-98124 |
medium | 5.5 | 0.0019 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidat | |
CVE-2026-98125 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale | |
CVE-2026-98126 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb/client: validate | |
CVE-2026-98127 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: smb/client: validate | |
CVE-2026-98128 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix tar | |
CVE-2026-98129 |
medium | 5.5 | 0.0012 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NUL | |
CVE-2026-98140 |
medium | 5.5 | 0.0010 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local | |
CVE-2026-98141 |
medium | 5.5 | 0.0010 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate repar | |
CVE-2026-98142 |
medium | 5.5 | 0.0011 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Vali | |
CVE-2026-98144 |
medium | 5.5 | 0.0010 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put th | |
CVE-2026-98145 |
medium | 5.5 | 0.0010 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject | |
CVE-2026-98147 |
medium | 5.5 | 0.0011 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on | |
CVE-2026-98148 |
medium | 5.5 | 0.0011 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD | |
CVE-2026-93682 |
medium | 5.8 | 0.0034 | 2026-10-29 | When the HTTP stream wrapper follows a redirect and the response carries a Location header | |
CVE-2025-14181 |
medium | 6.5 | 0.0031 | 2026-10-29 | The SOAP HTTP client guards its response buffer growth with a check that relies on signed | |
CVE-2025-1218 |
medium | 5.9 | 0.0028 | 2026-10-29 | The mysqlnd wire protocol parser reads fields out of server packets before checking that t | |
CVE-2026-17545 |
medium | 6.9 | 0.0037 | 2026-10-29 | On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as C | |
CVE-2026-91766 |
medium | 5.9 | 0.0029 | 2026-10-29 | When the http:// stream wrapper follows a redirect it forwards the user-supplied Authoriza | |
CVE-2026-91767 |
medium | 6.5 | 0.0011 | 2026-10-29 | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument | |
CVE-2026-91769 |
medium | 4.3 | 0.0016 | 2026-10-29 | PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries fir | |
CVE-2026-91768 |
medium | 6.5 | 0.0038 | 2026-10-29 | The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 1 | |
CVE-2026-92842 |
medium | 5.9 | 0.0028 | 2026-10-29 | The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-de | |
CVE-2026-100749 |
medium | 5.1 | 0.0009 | 2026-10-29 | Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extens | |
CVE-2026-97165 |
medium | 5.3 | 0.0014 | 2026-10-29 | Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extens | |
CVE-2026-100753 |
medium | 5.3 | 0.0015 | 2026-10-29 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (F | |
CVE-2026-101109 |
medium | 5.3 | 0.0015 | 2026-10-29 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) | |
CVE-2026-18416 |
medium | 5.3 | 0.0023 | 2026-10-29 | The CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c com | |
CVE-2026-12345 |
medium | 5.9 | 0.0034 | 2026-10-29 | The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker | |
CVE-2024-31027 |
medium | 5.4 | 0.0026 | 2026-10-29 | Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platf | |
CVE-2026-97301 |
medium | 6.5 | 0.0017 | 2026-10-29 | Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions. | |
CVE-2026-83589 |
medium | 6.1 | 0.0038 | 2026-10-29 | A flaw was found in oauth-proxy. The application fails to properly validate the destinatio | |
CVE-2026-105133 |
medium | 6.9 | 0.7947 | 2026-10-29 | KEV | Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote |
CVE-2026-104030 |
medium | 5.5 | 0.0012 | 2026-10-29 | A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Serv | |
CVE-2026-104031 |
medium | 5.5 | 0.0010 | 2026-10-29 | A flaw was found in SSSD. In configurations where the autofs responder service is enabled, | |
CVE-2026-104032 |
medium | 5.5 | 0.0010 | 2026-10-29 | A flaw was found in SSSD. An unprivileged local user can repeatedly request master automou | |
CVE-2026-106111 |
medium | 5.3 | 0.0028 | 2026-10-29 | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCo | |
CVE-2026-106114 |
medium | 5.3 | 0.0033 | 2026-10-29 | ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing cal | |
CVE-2026-106116 |
medium | 5.3 | 0.0033 | 2026-10-29 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trust | |
CVE-2026-106456 |
medium | 6.5 | 0.0024 | 2026-10-29 | Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, th | |
CVE-2026-106458 |
medium | 6.5 | 0.0027 | 2026-10-29 | Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, th |