Search
172,839 CVEs · Medium severity
CVEs (172,839, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 51–75 of 172,839 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-98135 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors_per_cluster in the boot sector is_boot_sector_ntfs() checks the boot sect… |
| CVE-2026-98134 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if register is null Nicholas Carlini reported a bug when veri… |
| CVE-2026-98133 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea(), the exit path unconditionally u… |
| CVE-2026-98132 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO states.c:__clean_func_state() can down… |
| CVE-2026-98131 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if the DMA mapping of an … |
| CVE-2026-98129 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() sas_port_alloc_num() can return NU… |
| CVE-2026-98128 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() mpi3mr_get_tgtdev_by_addr() inc… |
| CVE-2026-98127 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3_insert_range() does not check if the new file size … |
| CVE-2026-98126 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOC_FL_ZERO_RANGE is used without FALLOC_FL_KEEP_S… |
| CVE-2026-98125 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3_insert_range() and smb3_collapse_range(… |
| CVE-2026-98124 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3_zero_range(), smb3_punch_hole(), sm… |
| CVE-2026-98123 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration sctp_verify_asconf() walks ASCONF-A… |
| CVE-2026-98121 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks msc313e_wdt_probe() doesn't set the dr… |
| CVE-2026-9812 | MEDIUM | Patched | 6.5 | 2026-09-14 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate that a property field belongs to the specified run before upd… |
| CVE-2026-9811 | MEDIUM | 5.4 | 2026-05-29 | A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for associating projects with system … | |
| CVE-2026-98109 | MEDIUM | Patched | 4.7 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix race condition during device registration In hci_register_dev(), the power_on… |
| CVE-2026-98095 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). syzbot reported BUG() in so… |
| CVE-2026-98094 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe fbtft_mkdirty() can be reached from the fbcon rendering path … |
| CVE-2026-98092 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() acp6x_pdm_dma_close() does not free the runtim… |
| CVE-2026-98091 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from transaction update list When creating the first metadata chunk… |
| CVE-2026-98090 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_new_device() switches latest_dev … |
| CVE-2026-98082 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the possible bioc_list memory leak during error There are two possible ways to leak bioc me… |
| CVE-2026-98080 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroup_account_snapshot() [BUG] When running btrfs/252 … |
| CVE-2026-98078 | MEDIUM | Patched | 4.4 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization hton_seq() expects the host-order source first and th… |
| CVE-2026-9807 | MEDIUM | Patched | 4.3 | 2026-05-28 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions c… |