94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,951–5,000 of 94,138 · page 100 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90106 | CVE-2026-90106 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read direct… |
| CVE-2026-90105 | CVE-2026-90105 | In the Linux kernel, the following vulnerability has been resolved: vxlan: fix reading neigh ha Currently arp/neigh_reduce read neigh ha directly which can l… |
| CVE-2026-90104 | CVE-2026-90104 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decode_cb_sequence_args() allocates cs… |
| CVE-2026-90103 | CVE-2026-90103 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encode_layoutstats_maxsz budgets XDR_QUAD… |
| CVE-2026-90102 | CVE-2026-90102 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4_pnfs_ds_add() keys the per-… |
| CVE-2026-90101 | CVE-2026-90101 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix call to hardware monitoring event handler The first parameter of hwmon_notif… |
| CVE-2026-90100 | CVE-2026-90100 | In the Linux kernel, the following vulnerability has been resolved: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The max_period bo… |
| CVE-2026-9010 | CVE-2026-9010 CVSS 7.5 | The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_url' and 'user_name' parameters in versions up to, and including, 2.0… |
| CVE-2026-90099 | CVE-2026-90099 | In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifie… |
| CVE-2026-90098 | CVE-2026-90098 | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5_set_rx_mode() runs wi… |
| CVE-2026-90097 | CVE-2026-90097 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition The VMBus mod… |
| CVE-2026-90096 | CVE-2026-90096 | In the Linux kernel, the following vulnerability has been resolved: fuse: invalidate the correct range after O_APPEND direct write fuse_direct_write_iter() c… |
| CVE-2026-90095 | CVE-2026-90095 | In the Linux kernel, the following vulnerability has been resolved: fuse: Fix the condition to enable over-io-uring The existing condition in fuse_uring_cmd(… |
| CVE-2026-90094 | CVE-2026-90094 | In the Linux kernel, the following vulnerability has been resolved: arm64: process: Fix context switching MTE store-only tag check SCTLR_EL1.TCSO0 is set whe… |
| CVE-2026-90093 | CVE-2026-90093 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Since commit b66774b48dd9 ("… |
| CVE-2026-90092 | CVE-2026-90092 CVSS 8.0 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN New sk should not be added to … |
| CVE-2026-90091 | CVE-2026-90091 CVSS 8.0 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan For L2CAP sockets wit… |
| CVE-2026-90090 | CVE-2026-90090 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path btmtksdio_tx_packet() rou… |
| CVE-2026-90089 | CVE-2026-90089 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxp_process_fw_dump() pulls the … |
| CVE-2026-90088 | CVE-2026-90088 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop rfcomm_appl… |
| CVE-2026-90087 | CVE-2026-90087 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hci_conn when a second LE connect is rejected create_le_conn_co… |
| CVE-2026-90086 | CVE-2026-90086 | In the Linux kernel, the following vulnerability has been resolved: xsk: honor XDP_TX_METADATA in zero-copy path The zero-copy path reads TX metadata wheneve… |
| CVE-2026-90085 | CVE-2026-90085 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix NULL deref in NIX TM tree debugfs read path rvu_dbg_nix_tm_tree_display… |
| CVE-2026-90084 | CVE-2026-90084 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue b… |
| CVE-2026-90083 | CVE-2026-90083 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Only operate on Ethernet frames act_ife encapsulates/decapsulates the… |
| CVE-2026-90082 | CVE-2026-90082 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size mana_gd_query_max_resources()… |
| CVE-2026-90081 | CVE-2026-90081 | In the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper() in rds_cong_map_updated() rds_cong_map_updated() runs after… |
| CVE-2026-90080 | CVE-2026-90080 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup af_xdp_zc_qidx tracks receive… |
| CVE-2026-9008 | CVE-2026-9008 CVSS 4.3 | The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. This is due to the pagelist_unqprfx_ext_sh… |
| CVE-2026-90079 | CVE-2026-90079 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() rvu_mbox_init() is c… |
| CVE-2026-90078 | CVE-2026-90078 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: fix length calculations and avoid invalid header warnings syzbot r… |
| CVE-2026-90077 | CVE-2026-90077 | In the Linux kernel, the following vulnerability has been resolved: net: fix a resource leak in copy_net_ns() error handling path Currently, preinit_net() do… |
| CVE-2026-90076 | CVE-2026-90076 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum fq_init() computes quan… |
| CVE-2026-90075 | CVE-2026-90075 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_codel: clamp default quantum and mtu fq_codel_init() sets q->quantum = psch… |
| CVE-2026-90074 | CVE-2026-90074 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: clamp default quantum to avoid signed overflow fq_pie_init() sets q->q… |
| CVE-2026-90073 | CVE-2026-90073 | In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum before hhf_change() to avoid overflow hhf_init() sets q->qu… |
| CVE-2026-90072 | CVE-2026-90072 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfq_init() sets q->qua… |
| CVE-2026-90071 | CVE-2026-90071 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: restore skb->dev on the slave failure path teql_master_xmit() sets s… |
| CVE-2026-90070 | CVE-2026-90070 | In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Return zero on status read failure st33zp24_status() ignores the result of… |
| CVE-2026-9007 | CVE-2026-9007 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL Software allows reflected Cross-Sit… |
| CVE-2026-90069 | CVE-2026-90069 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - allocate async request context when cloning ACOMP_REQUEST_ON_STACK() rese… |
| CVE-2026-90068 | CVE-2026-90068 | In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix off-by-one check on the second enum channel The snd_soc_dapm_put_enum_dou… |
| CVE-2026-90067 | CVE-2026-90067 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banne… |
| CVE-2026-90066 | CVE-2026-90066 | In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify ftrace_direct… |
| CVE-2026-90065 | CVE-2026-90065 | In the Linux kernel, the following vulnerability has been resolved: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure IPPROTO_SMC… |
| CVE-2026-90064 | CVE-2026-90064 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Reject page faults from non-fault-mode scratch VMs Having scratch enabled does no… |
| CVE-2026-90063 | CVE-2026-90063 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gso_segs The user can specify any gso_… |
| CVE-2026-90062 | CVE-2026-90062 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: move hardware offload step after building the chain blob Allocate t… |
| CVE-2026-90061 | CVE-2026-90061 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip double clone set expressions on element insert Both the dynset… |
| CVE-2026-90060 | CVE-2026-90060 | In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Don't add invalid kcontrols to LED layer The kcontrol LED state layer trie… |