Search
151,643 CVEs · High severity
CVEs (151,643, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 101–125 of 151,643 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-98368 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place output path (esp->… | |
| CVE-2026-98367 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept We need to clear cep befor… | |
| CVE-2026-98366 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxe_rereg_user_mr() reassigns mr->ibmr.pd … | |
| CVE-2026-98364 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference under RCU in bundle creation xfrm_bundle_create() and xfrm_create_dumm… | |
| CVE-2026-98361 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Commit 0b261d7c1cd3 ("RDMA/rxe: Break endless… | |
| CVE-2026-98360 | HIGH | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds rxe_get_mcg() publishes a newly… | |
| CVE-2026-98359 | HIGH | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intentionally retur… | |
| CVE-2026-98357 | HIGH | 8.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isert_send_done() … | |
| CVE-2026-98349 | HIGH | 7.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw_process_probe_response() and the libi… | |
| CVE-2026-98348 | HIGH | 7.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association responses libipw_handle_assoc_resp() reads the capability, … | |
| CVE-2026-98341 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't free driver-owned scan requests When an interface goes down while a scan is runn… | |
| CVE-2026-9834 | HIGH | 7.2 | 2026-07-02 | The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Command Injection in all versions up to and including 7… | |
| CVE-2026-98339 | HIGH | 8.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when removing stale entries When an assoc AP switches to a ch… | |
| CVE-2026-98331 | HIGH | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the loca… | |
| CVE-2026-98330 | HIGH | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, … | |
| CVE-2026-9833 | HIGH | Patched | 7.1 | 2026-07-20 | The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in … |
| CVE-2026-98324 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: pxa: fix double counting of the hw descriptors pxad_alloc_desc() was converted from … | |
| CVE-2026-98320 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released nf_ct_put() releases the ct->ext are… | |
| CVE-2026-98318 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an abso… | |
| CVE-2026-98315 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfs_non_resident_attr_shrink() calls runlist help… | |
| CVE-2026-98311 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before register virt_wifi_newlink() calls netif_stacked_tran… | |
| CVE-2026-98305 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xx_setup() arms the stats poll before mxl… | |
| CVE-2026-9830 | HIGH | Patched | 8.2 | 2026-07-27 | The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespa… |
| CVE-2026-98290 | HIGH | 7.5 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup rfcomm_sock_cleanup_listen() closes… | |
| CVE-2026-98283 | HIGH | 8.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() kvmhv_emulate_tlbie_all_lpid… |