CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-98415 NONE In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node The setup_cpuhp_and_cpuidle() parses the device tree…
- CVE-2026-98414 NONE In the Linux kernel, the following vulnerability has been resolved: memcg: avoid charging the root memcg from obj_cgroup_charge_pages() obj_cgroup_charge_pages() resolves the objcg to its memcg…
- CVE-2026-98413 NONE In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avc_has_perm_noaudit() avc_has_perm_noaudit() is documented to return a copy of…
- CVE-2026-98412 NONE In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() If memory allocation fails in pwrseq_unit_setup_deps(), pwrseq_unit_put() is…
- CVE-2026-98411 NONE In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() If dev_set_name() fails in pwrseq_device_register(), we jump to…
- CVE-2026-98410 NONE In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog da9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(), when…
- CVE-2026-98409 NONE In the Linux kernel, the following vulnerability has been resolved: watchdog: rtd119x: Avoid division by zero clk_get_rate() could return 0. Avoid a division by zero…
- CVE-2026-98408 NONE In de Linux-kernel is de volgende kwetsbaarheid verholpen: watchdog: rzv2h: Vermijd deling door nul clk_get_rate() kan 0 retourneren. Voorkom een paniekfout door deling door nul.
- CVE-2026-98407 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed (data…
- CVE-2026-98406 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver ieee80211_set_bitrate_mask() checks if the…
- CVE-2026-98405 HIGH · 8.1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In parse_posix_sids(), sidsbuf_end is calculated using…
- CVE-2026-98404 NONE In de Linux kernel is de volgende kwetsbaarheid verholpen: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Smatch klaagt dat het retourneren van een…
- CVE-2026-98403 NONE In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy all but…
- CVE-2026-98402 NONE In the Linux kernel, the following vulnerability has been resolved: net: icmp: avoid invalid transport header access in icmp_send tracepoint syzbot reported a WARNING triggered…
- CVE-2026-98401 HIGH · 7.5 In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot reported a crash in qdisc_pkt_len_segs_init()…
- CVE-2026-98400 NONE In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like HMC…
- CVE-2026-98399 NONE In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump, which passes the…
- CVE-2026-98398 NONE In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache entries for zapped classes syzbot reported a lockdep splat hitting DEBUG_LOCKS_WARN_ON(1)…
- CVE-2026-98397 NONE In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpio_secondary_fwnode_init(), acpi_bus_find_device_by_name() returns a device…
- CVE-2026-98396 NONE In de Linux kernel is de volgende kwetsbaarheid verholpen: powerpc: KUAP niet herstellen in arch_exit_to_user_mode_prepare() KUAP betekent dat de kernel het gebruikersgeheugen niet kan aanraken,…
- CVE-2026-98395 NONE In the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit When __replay_soft_interrupts() replays a pending interrupt (e.g.…
- CVE-2026-98394 NONE In the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. Fahad Alharbi reported that recv(0,…
- CVE-2026-98393 NONE In the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit bounds…
- CVE-2026-98392 NONE In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one Valid indices into txq->urbd0s/tfds/bufs are 0..txq->count-1, so tfd_index ==…
- CVE-2026-98391 NONE In the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardown, the VM's runtime PM…
- CVE-2026-98390 NONE In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtualized system, the number of…
- CVE-2026-98389 NONE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GPU reset During resume from GPU reset, the gfx idle…
- CVE-2026-98388 NONE In the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock do_close_on_exec() currently happens while holding the exec_update_lock, which is used…
- CVE-2026-98387 NONE In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The return codes from skcipher_walk_virt() were not…
- CVE-2026-98386 NONE In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot For QLAFX00 the request ring…
- CVE-2026-94348 MEDIUM · 6.1 Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged…
- CVE-2026-35161 MEDIUM · 5.3 Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this…
- CVE-2026-110690 HIGH · 7.5 Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the…
- CVE-2026-110652 MEDIUM · 4.0 ONLYOFFICE DocumentServer voor 10.0.0 bevat een niet-geverifieerde server-side request forgery kwetsbaarheid in het /downloadfile/:docid eindpunt waarmee externe aanvallers de private-IP request-filtering-agent kunnen omzeilen door gebruik…
- CVE-2026-108065 CRITICAL · 9.8 SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker…
- CVE-2026-107870 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16.
- CVE-2026-104086 MEDIUM · 5.5 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows attackers to leak heap memory by crafting…
- CVE-2026-101217 MEDIUM · 6.5 Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker…
- CVE-2026-101216 MEDIUM · 6.6 Dell Unisphere for PowerMax vApp, versie(s) 9.2.4.x, bevat(ten) een Onjuiste Neutralisatie van Speciale Elementen die worden gebruikt in een Bevel ('Command Injection') kwetsbaarheid. Een hoog…
- CVE-2026-101215 MEDIUM · 6.6 Dell Unisphere for PowerMax vApp, versie(s) 9.2.4.x, bevat(ten) een onjuiste neutralisatie van speciale elementen die worden gebruikt in een kwetsbaarheid van een besturingssysteemcommando ('OS Command…
- CVE-2026-97278 HIGH · 7.2 Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9.
- CVE-2026-82026 HIGH · 8.8 Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or unauthenticated attackers to spawn a privileged shell…
- CVE-2026-16741 CRITICAL · 9.8 Onjuiste neutralisatie van speciale elementen die worden gebruikt in een OS-opdracht ('OS-opdrachtinjectie') kwetsbaarheid in TR7 Cyber Defense Inc. TR7 ASP op virtuele appliance en TR7…
- CVE-2026-16740 CRITICAL · 9.8 Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical…
- CVE-2026-109968 MEDIUM · 5.5 A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log…
- CVE-2026-108291 CRITICAL · 9.8 Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.
- CVE-2026-107867 HIGH · 7.1 De kwetsbaarheid 'Cross-site scripting' (XSS) in Crocoblock JetProductTables maakt Reflected XSS mogelijk. Dit probleem treft JetProductTables: van n.v.t. tot en met 1.2.4.
- CVE-2026-107433 MEDIUM · 6.5 Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP OAuth Server: from n/a through…
- CVE-2026-107426 HIGH · 7.3 Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from…
- CVE-2026-107425 MEDIUM · 6.5 Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket…