Search
16,920 CVEs · High severity
CVEs (16,920, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 16,920 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-9856 | HIGH | 7.1 | 2026-08-02 | A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pre… | |
| CVE-2026-9854 | HIGH | Patched | 7.8 | 2026-09-03 | A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying W… |
| CVE-2026-9853 | HIGH | Patched | 7.8 | 2026-09-03 | A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects wi… |
| CVE-2026-9852 | HIGH | Patched | 7.8 | 2026-09-03 | A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, dep… |
| CVE-2026-98369 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() syzbot rep… | |
| CVE-2026-98368 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place output path (esp->… | |
| CVE-2026-98367 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept We need to clear cep befor… | |
| CVE-2026-98366 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxe_rereg_user_mr() reassigns mr->ibmr.pd … | |
| CVE-2026-98364 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference under RCU in bundle creation xfrm_bundle_create() and xfrm_create_dumm… | |
| CVE-2026-98361 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Commit 0b261d7c1cd3 ("RDMA/rxe: Break endless… | |
| CVE-2026-98360 | HIGH | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds rxe_get_mcg() publishes a newly… | |
| CVE-2026-98359 | HIGH | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intentionally retur… | |
| CVE-2026-98357 | HIGH | 8.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isert_send_done() … | |
| CVE-2026-98349 | HIGH | 7.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw_process_probe_response() and the libi… | |
| CVE-2026-98348 | HIGH | 7.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association responses libipw_handle_assoc_resp() reads the capability, … | |
| CVE-2026-98341 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't free driver-owned scan requests When an interface goes down while a scan is runn… | |
| CVE-2026-98339 | HIGH | 8.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when removing stale entries When an assoc AP switches to a ch… | |
| CVE-2026-98331 | HIGH | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the loca… | |
| CVE-2026-98330 | HIGH | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, … | |
| CVE-2026-98324 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: pxa: fix double counting of the hw descriptors pxad_alloc_desc() was converted from … | |
| CVE-2026-98320 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released nf_ct_put() releases the ct->ext are… | |
| CVE-2026-98318 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an abso… | |
| CVE-2026-98315 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfs_non_resident_attr_shrink() calls runlist help… | |
| CVE-2026-98311 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before register virt_wifi_newlink() calls netif_stacked_tran… | |
| CVE-2026-98305 | HIGH | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xx_setup() arms the stats poll before mxl… |