94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,001–5,050 of 94,138 · page 101 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-9006 | CVE-2026-9006 CVSS 7.4ibm | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to… |
| CVE-2026-90059 | CVE-2026-90059 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: restore NET_IP_ALIGN in the RX DMA offset Since the RX path was converted to… |
| CVE-2026-90058 | CVE-2026-90058 | In the Linux kernel, the following vulnerability has been resolved: net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup qdisc_get_stab() accepts a us… |
| CVE-2026-90057 | CVE-2026-90057 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() Jaeyoung Chung and… |
| CVE-2026-90056 | CVE-2026-90056 | In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fec_ptp_init() is only called when fep->buf… |
| CVE-2026-90055 | CVE-2026-90055 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid ci_range initialization syzbot reported a shift-out-of-boun… |
| CVE-2026-90054 | CVE-2026-90054 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix corruption of urgent data on multi-segment retransmit On the normal xmit path, w… |
| CVE-2026-90053 | CVE-2026-90053 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_htb: limit htb_classify inner-class filter hops htb_classify() follows eac… |
| CVE-2026-90052 | CVE-2026-90052 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc ("dm-integ… |
| CVE-2026-90051 | CVE-2026-90051 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx Devmem tcp tx doesn't work without zero-copy, however … |
| CVE-2026-90050 | CVE-2026-90050 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: clamp quantum and initial_quantum in change path The fq change path accept… |
| CVE-2026-90049 | CVE-2026-90049 CVSS 9.3 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() skb_zerocopy() copies … |
| CVE-2026-90048 | CVE-2026-90048 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() ni_create_attr_list() all… |
| CVE-2026-90047 | CVE-2026-90047 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usable VRAM get_flat_ccs_offset() reads th… |
| CVE-2026-90046 | CVE-2026-90046 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: don't spin_trylock() in NMI on UP Patch series "mm/page_alloc: fixes for f… |
| CVE-2026-90045 | CVE-2026-90045 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling io_data stores a pointer to the submitting tas… |
| CVE-2026-90044 | CVE-2026-90044 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix Use-After-Free in AIO error path In ffs_epfile_write_iter() and ff… |
| CVE-2026-90043 | CVE-2026-90043 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: zram: fix slot lock bit position on big-endian 64-bit The slot lock is a bit operation on… |
| CVE-2026-90042 | CVE-2026-90042 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc() buffers The fscrypt subsystem uses the scat… |
| CVE-2026-90041 | CVE-2026-90041 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure sony_input_configured() adds some contro… |
| CVE-2026-90040 | CVE-2026-90040 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gme… |
| CVE-2026-9004 | CVE-2026-9004 CVSS 4.3 | The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.… |
| CVE-2026-90039 | CVE-2026-90039 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Guard admin state-revocation walks with NFSD_NET_UP Writing to /proc/fs/nfsd/unlock… |
| CVE-2026-90038 | CVE-2026-90038 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during export state revocation nfsd4_revoke_export_st… |
| CVE-2026-90037 | CVE-2026-90037 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lru reaping An nfs4_openowner left on nn… |
| CVE-2026-90036 | CVE-2026-90036 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during blocked-lock reaping A bare lock owner -- its … |
| CVE-2026-90035 | CVE-2026-90035 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix division by zero in get_estimated_bw() get_estimated_bw() divides by… |
| CVE-2026-90034 | CVE-2026-90034 | In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: change kmalloc() to kzalloc() Change the kmalloc() calls in usb_mdc80… |
| CVE-2026-90033 | CVE-2026-90033 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() The snd_usbmidi_us122l_outp… |
| CVE-2026-90032 | CVE-2026-90032 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: usbtv: keep device alive while ALSA card exists The ALSA PCM callbacks store the d… |
| CVE-2026-90031 | CVE-2026-90031 | In the Linux kernel, the following vulnerability has been resolved: usb-storage: ene_ub6250: fix race between scan work and probe ene_ub6250_probe() calls us… |
| CVE-2026-90030 | CVE-2026-90030 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: clear forceRM when issuing EndTransfer The forceRM bit of the DEPCMD register … |
| CVE-2026-9003 | CVE-2026-9003 CVSS 7.5 | E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands… |
| CVE-2026-90029 | CVE-2026-90029 | In the Linux kernel, the following vulnerability has been resolved: usb: storage: realtek_cr: fix use-after-free on disconnect realtek_cr_destructor() calls … |
| CVE-2026-90028 | CVE-2026-90028 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: hd3ss3220: track VBUS enable state per consumer regulator_is_enabled() report… |
| CVE-2026-90027 | CVE-2026-90027 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop cc_debounce_dwork is queue… |
| CVE-2026-90026 | CVE-2026-90026 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: cancel reset_work on stop pdphy_stop() disables IRQs but leaves re… |
| CVE-2026-90025 | CVE-2026-90025 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver in… |
| CVE-2026-90024 | CVE-2026-90024 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs A null-pointer d… |
| CVE-2026-90023 | CVE-2026-90023 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() … |
| CVE-2026-90022 | CVE-2026-90022 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi2: fix use-after-free in string attribute show path f_midi2_opts_str_s… |
| CVE-2026-90021 | CVE-2026-90021 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: initialize work in f_midi_alloc() f_midi_alloc initializes free_ref … |
| CVE-2026-90020 | CVE-2026-90020 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() gadget_dev_ioctl() reads … |
| CVE-2026-9002 | CVE-2026-9002 CVSS 6.5ibm | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could allow an adjacent attacker to cause a denial of service due to improper validation in the XDF decoder… |
| CVE-2026-90019 | CVE-2026-90019 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fix null pointer dereference in usb_put_function_instance() usb_put_function… |
| CVE-2026-90018 | CVE-2026-90018 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() rtw_get_wps_attr(… |
| CVE-2026-90017 | CVE-2026-90017 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() rtw_action_frame_parse() tak… |
| CVE-2026-90016 | CVE-2026-90016 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() rtw_restruct_wmm_ie() scans in_… |
| CVE-2026-90015 | CVE-2026-90015 | In the Linux kernel, the following vulnerability has been resolved: xhci: fix lost bounce buffers on TDs spanning several ring segments When a TD reaches a l… |
| CVE-2026-90014 | CVE-2026-90014 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: tracing: Have show_event_filters/triggers files take trace array ref The newly added file… |