Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,131 vulnerabilities match.

CVESeveritySummary
CVE-2026-1102596.8 MediumOW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions()
CVE-2026-1102586.8 MediumOW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions
CVE-2026-1102576.8 MediumOW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute
CVE-2025-714337.7 HighKaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Access
CVE-2024-583924.8 MediumPhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint
CVE-2020-372829.3 Criticaloffice-converter through 1.0.2 OS Command Injection via fileName in generatePdf
CVE-2020-372819.2 CriticalGravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass
CVE-2017-202868.5 HighDevIL through 1.8.0 Heap Buffer Overflow via GIF iGetPalette
CVE-2016-200996.8 MediumL-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe
CVE-2026-351615.3 MediumDell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial…
CVE-2026-1040866.8 Medium7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table
CVE-2026-1078707.1 HighWordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability
CVE-2026-943486.1 MediumDell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with local access could potentially exploit…
CVE-2026-1012156.6 MediumDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially…
CVE-2026-1012176.5 MediumDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this…
CVE-2026-1106908.7 HighCloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack
CVE-2026-1012166.6 MediumDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit…
CVE-2026-1080659.8 CriticalUnauthenticated SQL Injection in Channel Software WebAlliance eCommerce
CVE-2026-98431Not scoredRDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency
CVE-2026-98430Not scoredRDMA/efa: Keep admin queues alive while IRQ is registered
CVE-2026-98429Not scoredRDMA/efa: Keep EQ resources alive while IRQ is registered
CVE-2026-98428Not scoredALSA: usb: 6fire: Avoid embedded URBs
CVE-2026-98427Not scorednet/sched: codel: bound the dropping loop per dequeue call
CVE-2026-98426Not scoredwifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
CVE-2026-98425Not scoredwifi: mac80211: don't warn when an IBSS has no channel to scan
CVE-2026-98424Not scoredwifi: cfg80211: undo netns switch if renaming the wiphy fails
CVE-2026-98423Not scoredwifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
CVE-2026-98422Not scoredwifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
CVE-2026-98421Not scoredwifi: mac80211: require a peer station for TDLS setup confirm
CVE-2026-98420Not scoredksmbd: follow SMB2 session expiration semantics
CVE-2026-984197.0 Highdrop_monitor: fix out-of-bounds write in reset_per_cpu_data()
CVE-2026-98418Not scoredsched/core: Avoid false migration warning for proxy donors
CVE-2026-98417Not scorednet: xfrm: reject unrepresentable espintcp transport headers
CVE-2026-98416Not scoreddmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
CVE-2026-98415Not scoredsoc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
CVE-2026-98414Not scoredmemcg: avoid charging the root memcg from obj_cgroup_charge_pages()
CVE-2026-98413Not scoredselinux: always fill AVC decision in avc_has_perm_noaudit()
CVE-2026-98412Not scoredpower: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
CVE-2026-98411Not scoredpower: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
CVE-2026-98410Not scoredwatchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
CVE-2026-98409Not scoredwatchdog: rtd119x: Avoid division by zero
CVE-2026-98408Not scoredwatchdog: rzv2h: Avoid division by zero
CVE-2026-98407Not scoredwifi: rsi: fix heap OOB write on key removal
CVE-2026-98406Not scoredwifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
CVE-2026-984058.1 Highsmb: client: fix missing iov bounds check in parse_posix_sids()
CVE-2026-98404Not scoreddrm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()
CVE-2026-98403Not scoreds390/boot: Avoid IPL parameter append past command line
CVE-2026-98402Not scorednet: icmp: avoid invalid transport header access in icmp_send tracepoint
CVE-2026-984017.5 Highnet: iptunnel: fix stale transport header during tunnel decapsulation
CVE-2026-98400Not scoreds390/ipl: Fix NULL deref in kdump without re-IPL parm block

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.