Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,087 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-109553 | 7.5 High | Gitea SSH certificate principal impersonation of other users | Oct 18, 2026 |
| CVE-2026-104627 | 5.4 Medium | Gitea OpenID account linking without session binding | Oct 18, 2026 |
| CVE-2024-4457 | 9.1 Critical | Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution | Oct 18, 2026 |
| CVE-2026-111993 | 4.8 Medium | Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage | Oct 18, 2026 |
| CVE-2026-111992 | 5.3 Medium | itsmeravitejak Online-Examination-System Exam exam.php startExam sql injection | Oct 18, 2026 |
| CVE-2026-98868 | Not scored | dm-pcache: reject a kset that overruns its segment | Oct 18, 2026 |
| CVE-2026-98867 | Not scored | dm-pcache: bound the logical key offset from persistent memory | Oct 18, 2026 |
| CVE-2026-98866 | Not scored | sched/cache: Introduce task_struct->sched_cache_grp to fix UAF | Oct 18, 2026 |
| CVE-2026-98865 | Not scored | sched_ext: Don't run ops.dequeue() with a DSQ lock held | Oct 18, 2026 |
| CVE-2026-98864 | Not scored | sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task | Oct 18, 2026 |
| CVE-2026-98863 | Not scored | KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails | Oct 18, 2026 |
| CVE-2026-98862 | Not scored | audit: fix exe mark UAF in kill_rules() | Oct 18, 2026 |
| CVE-2026-98861 | Not scored | fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() | Oct 18, 2026 |
| CVE-2026-98860 | Not scored | HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request | Oct 18, 2026 |
| CVE-2026-98859 | Not scored | HID: multitouch: stop the release timer from being rearmed on remove | Oct 18, 2026 |
| CVE-2026-98858 | Not scored | io_uring: fix task_work add use-after-free with SQPOLL | Oct 18, 2026 |
| CVE-2026-98857 | Not scored | ipvs: bound LBLCR and LBLC cache growth | Oct 18, 2026 |
| CVE-2026-98856 | Not scored | kprobes: Skip disarmed probes when checking optkprobe overlap | Oct 18, 2026 |
| CVE-2026-98855 | Not scored | of/overlay: put property on deadprops only after changeset add succeeds | Oct 18, 2026 |
| CVE-2026-98854 | Not scored | of/overlay: only treat a positive changeset id as registered | Oct 18, 2026 |
| CVE-2026-98853 | Not scored | net: gso: limit recursive IP-in-IP segmentation | Oct 18, 2026 |
| CVE-2026-98852 | Not scored | net: extend IPv6 exthdr detection of tunneled packets | Oct 18, 2026 |
| CVE-2026-98851 | Not scored | netfilter: nft_flow_offload: drop flowtable reference on init error path | Oct 18, 2026 |
| CVE-2026-98850 | Not scored | net/packet: prevent TX_RING byte count overflow | Oct 18, 2026 |
| CVE-2026-98849 | Not scored | pfcp: fix socket lifetime on netdevice registration failure | Oct 18, 2026 |
| CVE-2026-98848 | Not scored | rtc: ac100: Assign .num before accessing .hws | Oct 18, 2026 |
| CVE-2026-98847 | Not scored | rtc: spear: initialize IRQ state before requesting alarm IRQ | Oct 18, 2026 |
| CVE-2026-98846 | Not scored | sctp: check RCV_SHUTDOWN after the sendmsg connect wait | Oct 18, 2026 |
| CVE-2026-98845 | Not scored | tpm: Disable TPM on null key name mismatch | Oct 18, 2026 |
| CVE-2026-98844 | Not scored | netfs: clear post-EOF pagecache when extending a file via write | Oct 18, 2026 |
| CVE-2026-98843 | Not scored | netfs: zero gaps in read-gaps folio to avoid writing back stale data | Oct 18, 2026 |
| CVE-2026-98842 | Not scored | module: fix lost error code from codetag_load_module() | Oct 18, 2026 |
| CVE-2026-98841 | Not scored | virt: vmgenid: set driver_data before registering notification handlers | Oct 18, 2026 |
| CVE-2026-98840 | Not scored | vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF | Oct 18, 2026 |
| CVE-2026-98839 | Not scored | vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() | Oct 18, 2026 |
| CVE-2026-98838 | Not scored | vt: skip screen update for DEC alignment test on backgroup consoles | Oct 18, 2026 |
| CVE-2026-98837 | Not scored | ALSA: caiaq: unregister the input device when probe fails | Oct 18, 2026 |
| CVE-2026-98836 | Not scored | ALSA: line6: reject oversized playback packets | Oct 18, 2026 |
| CVE-2026-98835 | Not scored | iio: accel: kionix-kx022a: Fix array boundary check | Oct 18, 2026 |
| CVE-2026-98834 | Not scored | mtd: core: avoid double-free of OTP NVMEM device | Oct 18, 2026 |
| CVE-2026-98833 | Not scored | mtd: core: call _get_device() with the master MTD | Oct 18, 2026 |
| CVE-2026-98832 | Not scored | blk-cgroup: save IRQ state in blkg_tryget_closest() | Oct 18, 2026 |
| CVE-2026-98831 | Not scored | of/overlay: don't leak fragment references when changeset init fails | Oct 18, 2026 |
| CVE-2026-98830 | Not scored | wifi: wfx: validate MIB read length before copying to caller | Oct 18, 2026 |
| CVE-2026-98829 | Not scored | wifi: mac80211: drop oversized fragments to avoid extra_len overflow | Oct 18, 2026 |
| CVE-2026-98828 | Not scored | wifi: ath9k: reject short WMI command responses | Oct 18, 2026 |
| CVE-2026-98827 | Not scored | wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE | Oct 18, 2026 |
| CVE-2026-98826 | Not scored | rtc: ac100: Fix clock provider use-after-free on probe failure | Oct 18, 2026 |
| CVE-2026-98825 | Not scored | rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() | Oct 18, 2026 |
| CVE-2026-98824 | Not scored | wifi: mac80211: validate TX status rate metadata | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.