CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-98190 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilc_wfi_p2p_rx() and mgmt_tx() start parsing…
- CVE-2026-98189 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() wilc_wlan_handle_isr_ext() takes the RX transfer size from…
- CVE-2026-98188 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate curve data length in the calibration curve converters p54_convert_rev0() and p54_convert_rev1() read…
- CVE-2026-98187 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST The PDR_INTERFACE_LIST loop only checks that…
- CVE-2026-98186 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiex_search_oui_in_ie() reads a pairwise-cipher…
- CVE-2026-98185 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: validate scan response extents mwifiex_ret_802_11_scan() subtracts the fixed response fields and the firmware-provided…
- CVE-2026-98184 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiex_cfg80211_authenticate() derives the authentication frame length from req->ie_len…
- CVE-2026-98183 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds read for empty PREQ elements ieee80211_mesh_preq_size_ok() derives the location of the…
- CVE-2026-98182 NONE In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: refuse to make a monitor active when it has no queue A monitor…
- CVE-2026-98181 NONE In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gud_plane_atomic_check() The plane property loop uses req->properties[num_properties + i] as…
- CVE-2026-98180 HIGH · 7.1 In the Linux kernel, the following vulnerability has been resolved: drm/msm: RCU-free the scheduler-containing ring and VM objects Both struct msm_ringbuffer and struct msm_gem_vm embed…
- CVE-2026-98179 NONE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix rmmio iounmap skipped on device removal amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so drm_dev_enter()…
- CVE-2026-98178 NONE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpu_amdkfd_clear_kfd_mapping() assumes that a non-NULL kfd_dev has a…
- CVE-2026-98177 NONE In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid integer underflow in EOP ring size calculation. The low 6 bits of cp_hqd_eop_control…
- CVE-2026-98176 NONE In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc The low 6 bits…
- CVE-2026-98175 HIGH · 7.5 In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in clean_demultiplex_info() clean_demultiplex_info() cancels server->echo delayed work but not server->reconnect,…
- CVE-2026-98174 HIGH · 7.5 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeros…
- CVE-2026-98173 HIGH · 7.5 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of iface in cifs_try_adding_channels() cifs_try_adding_channels() iterates ses->iface_list with list_for_each_entry_safe_from(), which captures…
- CVE-2026-98172 NONE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established…
- CVE-2026-98171 HIGH · 8.8 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Fix several related bounds…
- CVE-2026-98170 NONE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() In move_smb2_ea_to_cifs(), the while (src_size >…
- CVE-2026-98169 HIGH · 7.1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_snapshots() If snapshot_array_size is smaller than GMT_TOKEN_SIZE, smb3_enum_snapshots()…
- CVE-2026-98168 NONE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifs_query_reparse_point() In cifs_query_reparse_point(), the start >= end check…
- CVE-2026-98167 NONE In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server->total_read for compound encrypted PDUs In receive_encrypted_standard(), server->total_read is left at the…
- CVE-2026-98166 HIGH · 7.8 In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped-out resources never leaving their bulk_move range ttm_tt_swapout() returns the number of pages…
- CVE-2026-98165 NONE In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was…
- CVE-2026-97308 MEDIUM · 4.8 Unauthenticated Bypass Vulnerability in Login Lockdown
- CVE-2026-95594 HIGH · 8.1 Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from…
- CVE-2026-95526 HIGH · 7.3 Unauthenticated Broken Access Control in BEAR
- CVE-2026-95105 NONE Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to…
- CVE-2026-94675 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack
- CVE-2026-94206 NONE Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the…
- CVE-2026-66588 NONE Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive.
- CVE-2026-62072 HIGH · 8.8 Subscriber Broken Access Control in Progress Planner
- CVE-2026-4889 NONE SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to…
- CVE-2026-48199 HIGH · 7.5 Unauthenticated Broken Access Control in Sermon'e
- CVE-2026-48197 HIGH · 7.2 Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
- CVE-2026-42638 HIGH · 7.5 Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through…
- CVE-2026-42637 MEDIUM · 6.5 Unauthenticated Settings Change in PayPlug for WooCommerce (Official)
- CVE-2026-42636 HIGH · 7.1 Niet-geauthenticeerde Cross-Site Scripting (XSS) in WP Cookie Notice voor GDPR, CCPA & ePrivacy-toestemming
- CVE-2026-42635 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions
- CVE-2026-42634 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section.
- CVE-2026-42418 HIGH · 7.1 De kwetsbaarheid 'Cross-site scripting' (XSS) in Socialrocket veroorzaakt door onjuiste neutralisatie van invoer tijdens het genereren van webpagina's. Socialrocket maakt Reflected XSS mogelijk. Dit probleem…
- CVE-2026-42417 CRITICAL · 9.3 Unauthenticated SQL Injection in ARMember Premium
- CVE-2026-42416 HIGH · 8.5 Subscriber SQL Injection in UDesign Core
- CVE-2026-42415 CRITICAL · 9.3 Unauthenticated SQL Injection in Porto Theme - Functionality
- CVE-2026-42414 HIGH · 8.5 Subscriber SQL Injection in ListingPro
- CVE-2026-42413 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate
- CVE-2026-41562 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Norvis Backup
- CVE-2026-41561 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Museder RestoreOne