CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-99256 NONE In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rw_semaphore for background_work_lock.…
- CVE-2026-99255 NONE In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't hide a link from cancellations A task that exits cancels its tracked requests…
- CVE-2026-99254 NONE In the Linux kernel, the following vulnerability has been resolved: io_uring: don't flood a cancelling task with task_work io_ring_exit_work() asks each task which has used…
- CVE-2026-99253 NONE In the Linux kernel, the following vulnerability has been resolved: io_uring/cancel: rearm local work wake up before sleep io_uring_try_cancel_requests() sets ->cq_wait_nr to 1 so that…
- CVE-2026-99252 NONE Reden van afwijzing: deze CVE-ID is afgewezen of ingetrokken door de CVE-nummeringsinstantie.
- CVE-2026-99251 NONE In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Avoid infinite retry loop in init_vp_index() There is a retry loop in init_vp_index()…
- CVE-2026-99250 NONE In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There have been various bug reports related to SMP systems hanging…
- CVE-2026-99249 NONE In the Linux kernel, the following vulnerability has been resolved: pid_namespace: make zap_pid_ns_processes() freezable When the init of a pid namespace exits, zap_pid_ns_processes() waits until…
- CVE-2026-99248 NONE In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced…
- CVE-2026-99247 NONE In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work if tracing is disabled If trace buffer allocation fails…
- CVE-2026-99246 HIGH · 8.1 In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with node lock The tipc_node_reset_links trace event asks tipc_node_dump()…
- CVE-2026-99245 NONE In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring restriction The restrict_link check in key_reject_and_link() is done before…
- CVE-2026-99244 NONE In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper Since commit 7fea700e04bd ("zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with…
- CVE-2026-99243 NONE Reden van afwijzing: deze CVE-ID is afgewezen of ingetrokken door de CVE-nummeringsinstantie.
- CVE-2026-114442 MEDIUM · 6.5 Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP collector XML parsing path. An authenticated user with…
- CVE-2026-89293 NONE In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed…
- CVE-2026-89292 NONE In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured…
- CVE-2026-89229 NONE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai.copilot) allows a malicious application installed on the…
- CVE-2026-77778 HIGH · 7.1 ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.
- CVE-2026-77777 HIGH · 7.1 ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate…
- CVE-2026-77691 HIGH · 8.1 ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA
- CVE-2026-120333 NONE The actions linked in the emails of the extension (e.g. to confirm a registration or the deletion of an account) do not reject requests with…
- CVE-2026-120332 NONE The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with access to the mail module can inject…
- CVE-2026-120331 NONE Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host. Backend users with access…
- CVE-2026-120330 NONE Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the requested mail…
- CVE-2026-120329 NONE Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to the configuration options of the module.…
- CVE-2026-120328 NONE The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated attackers can retrieve personal data of…
- CVE-2026-120327 NONE The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external…
- CVE-2026-119843 MEDIUM · 6.5 A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio…
- CVE-2026-119724 HIGH · 7.5 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache JClouds. This issue affects Apache JClouds:…
- CVE-2026-119641 MEDIUM · 6.5 ** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie. An authenticated Oozie user can reconfigure another tenant's workflow job and change its…
- CVE-2026-92610 CRITICAL · 9.8 In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared…
- CVE-2026-91075 MEDIUM · 5.3 The Eupago Gateway For Woocommerce WordPress plugin from 4.5.0 through 4.7.5 does not verify the authenticity of incoming payment-confirmation webhook requests in some configurations, allowing…
- CVE-2026-121024 MEDIUM · 5.4 Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report…
- CVE-2026-121023 MEDIUM · 5.5 Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local…
- CVE-2026-121022 HIGH · 8.1 Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to…
- CVE-2026-121021 MEDIUM · 5.5 Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker…
- CVE-2026-121020 MEDIUM · 4.3 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows…
- CVE-2026-118448 NONE A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects nd_to_text. If the underlying text conversion fails, including failures caused by invalid parameters,…
- CVE-2026-118447 NONE A use of uninitialized memory vulnerability in the pybddisasm Python bindings may disclose process memory when instruction decoding fails. The nd_decode, nd_decode_ex, nd_decode_ex2, and nd_decode_with_context…
- CVE-2026-118446 NONE A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects, including ND_OPERAND arrays. These arrays are exposed as Python lists whose…
- CVE-2026-118445 NONE A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objects. These members are exposed through Python objects that reference memory owned…
- CVE-2026-118444 NONE Out-of-bounds read vulnerabilities in the pybddisasm Python bindings may disclose adjacent process memory during instruction decoding. The nd_decode function may read up to 15 bytes…
- CVE-2026-115231 NONE In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request…
- CVE-2026-113421 NONE In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full callback when the module is stopped and unloaded. With event…
- CVE-2026-109161 MEDIUM · 4.9 Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of service.
- CVE-2026-105982 HIGH · 7.2 Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root…
- CVE-2026-105981 HIGH · 7.2 Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them with…
- CVE-2026-105980 HIGH · 7.2 Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root…
- CVE-2026-105979 HIGH · 7.2 Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root…