Search
16,949 CVEs
CVEs (16,949, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 126–150 of 16,949 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-114622 | HIGH | Patched | 7.2 | 2026-10-23 | baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in Them… |
| CVE-2026-114621 | HIGH | Patched | 8.8 | 2026-10-23 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request… |
| CVE-2026-114357 | CRITICAL | — | 2026-10-23 | Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to o… | |
| CVE-2026-114356 | HIGH | — | 2026-10-23 | Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application w… | |
| CVE-2026-114355 | HIGH | — | 2026-10-23 | OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local unprivileged pro… | |
| CVE-2026-114354 | HIGH | — | 2026-10-23 | Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allow… | |
| CVE-2026-114353 | HIGH | — | 2026-10-23 | Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physi… | |
| CVE-2026-10632 | HIGH | 8.7 | 2026-10-23 | A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject JavaScript through the packages pa… | |
| CVE-2026-99087 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has th… | |
| CVE-2026-99086 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dm_integrity_resume() re-reads the superblock from the… | |
| CVE-2026-99085 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler A CPU going down has… | |
| CVE-2026-99084 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable directory iterate_dir() takes the directory's i_rwsem shar… | |
| CVE-2026-99083 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in krb5_authenticate() In krb5_authenticate(), out_len is calculat… | |
| CVE-2026-99082 | NONE | Patched | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO cache KVM tags the per-vCPU MMIO cache with a mems… |
| CVE-2026-99081 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA R… | |
| CVE-2026-99080 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode() For many years we've had a hard to hit leak of xarra… | |
| CVE-2026-99079 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on refill retry When an XDP redirect to an AF_XDP socket f… | |
| CVE-2026-99078 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF_XDP on a striding RQ, mlx5e … | |
| CVE-2026-99077 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redi… | |
| CVE-2026-99076 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching Currently, when ICMPv6 Packet Too Big and Redirect… | |
| CVE-2026-99075 | NONE | Patched | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: reschedule node refcount update on thread exit When a thread exits via BINDER_THREAD_EXIT… |
| CVE-2026-99074 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group shrinks Commit 7d3f3b4367f3 ("net: ipv4: Cache pmtu for all pa… | |
| CVE-2026-99073 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shrinks Commit 4ce5dc9316de ("inet: switch inet_dump_fib(… | |
| CVE-2026-99072 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when nexthop group shrinks Commit 680aea08e78c ("net: ipv4: Emit … | |
| CVE-2026-99071 | NONE | — | 2026-10-23 | In the Linux kernel, the following vulnerability has been resolved: ipv4: do not warn on route notification size race Commit 680aea08e78c ("net: ipv4: Emit notification w… |