Search
43,412 CVEs
CVEs (43,412, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 226–250 of 43,412 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-98874 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect Clearly, from a user perspective, it mu… | |
| CVE-2026-98875 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SE… | |
| CVE-2026-109935 | NONE | Patched | — | 2026-10-23 | The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a published post is rendered through the WordPress REST API, allowing … |
| CVE-2025-69723 | NONE | — | 2026-10-22 | A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL. | |
| CVE-2025-65200 | NONE | — | 2026-10-22 | An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the … | |
| CVE-2026-115516 | NONE | — | 2026-10-22 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-67597 | NONE | — | 2026-10-22 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-51954 | NONE | — | 2026-10-22 | An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri. | |
| CVE-2026-114485 | NONE | — | 2026-10-22 | Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with delegated us… | |
| CVE-2026-114486 | NONE | — | 2026-10-22 | Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to by… | |
| CVE-2026-114487 | NONE | — | 2026-10-22 | Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-ad… | |
| CVE-2026-78801 | NONE | — | 2026-10-22 | An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitive information via the hidden_fac… | |
| CVE-2026-78846 | NONE | — | 2026-10-22 | AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing. | |
| CVE-2026-107079 | NONE | — | 2026-10-22 | An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component | |
| CVE-2026-103634 | NONE | Patched | — | 2026-10-22 | Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). count_min_sketch::deserialize() did not include t… |
| CVE-2026-96391 | NONE | — | 2026-10-22 | Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1. | |
| CVE-2026-96379 | NONE | — | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr v… | |
| CVE-2026-96363 | NONE | — | 2026-10-22 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. | |
| CVE-2026-87938 | NONE | — | 2026-10-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versio… | |
| CVE-2026-87941 | NONE | — | 2026-10-22 | Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x. | |
| CVE-2026-76407 | NONE | — | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a sof… | |
| CVE-2026-76408 | NONE | — | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a sof… | |
| CVE-2026-76526 | NONE | — | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a sof… | |
| CVE-2026-76527 | NONE | — | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a sof… | |
| CVE-2026-76528 | NONE | — | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a sof… |