Search
37,428 CVEs · Critical severity
CVEs (37,428, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 451–475 of 37,428 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-90606 | CRITICAL | 9.9 | 2026-09-14 | A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Setup of the com… | |
| CVE-2026-90605 | CRITICAL | 9.9 | 2026-09-14 | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component boa… | |
| CVE-2026-90558 | CRITICAL | 9.8 | 2026-09-12 | sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can … | |
| CVE-2026-9055 | CRITICAL | 9.8 | 2026-09-02 | The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insuf… | |
| CVE-2026-90532 | CRITICAL | 10.0 | 2026-10-13 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potential… | |
| CVE-2026-90531 | CRITICAL | 9.6 | 2026-10-13 | Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-priv… | |
| CVE-2026-90530 | CRITICAL | 9.3 | 2026-10-13 | ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.… | |
| CVE-2026-9051 | CRITICAL | 9.1 | 2026-05-29 | There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentica… | |
| CVE-2026-90456 | CRITICAL | 8.1 | 2026-09-11 | An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies … | |
| CVE-2026-90414 | CRITICAL | Patched | 9.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isert_recv_done() hands each received PDU … |
| CVE-2026-90413 | CRITICAL | 9.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data than was received isert_login_recv_done() records how … | |
| CVE-2026-90235 | CRITICAL | 9.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE xprtsock replaces and res… | |
| CVE-2026-90230 | CRITICAL | 9.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() nvmet_execute_auth_send() allocates the D… | |
| CVE-2026-90173 | CRITICAL | 9.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ib_free_cq() smbdirect_connection_destroy_qp() creates the… | |
| CVE-2026-90151 | CRITICAL | 9.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocation failure nfs4_alloc_client() allocates an NFSv4.0… | |
| CVE-2026-90110 | CRITICAL | 9.4 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting system stores pee… | |
| CVE-2026-90104 | CRITICAL | 9.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decode_cb_sequence_args() allocates csa_rclists wit… | |
| CVE-2026-90049 | CRITICAL | 9.3 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() skb_zerocopy() copies frags from @f… | |
| CVE-2026-90048 | CRITICAL | 9.8 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() ni_create_attr_list() allocates a fixe… | |
| CVE-2026-90042 | CRITICAL | 9.8 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc() buffers The fscrypt subsystem uses the scatterlist crypt… | |
| CVE-2026-90038 | CRITICAL | 9.8 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during export state revocation nfsd4_revoke_export_states() has th… | |
| CVE-2026-90037 | CRITICAL | 9.8 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lru reaping An nfs4_openowner left on nn->close_lru a… | |
| CVE-2026-90036 | CRITICAL | 9.8 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during blocked-lock reaping A bare lock owner -- its only remainin… | |
| CVE-2026-90012 | CRITICAL | 9.8 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix DMA mapping ownership on partial map failure If RX mapping fails after TX mapping succeeds, _… | |
| CVE-2026-90011 | CRITICAL | 9.1 | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator byte for the login payload iscsi_target_check_login_request(… |