Search
14,262 CVEs · Medium severity
CVEs (14,262, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 14,262 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-9864 | MEDIUM | 4.8 | 2026-10-01 | Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or… | |
| CVE-2026-9859 | MEDIUM | Patched | 6.5 | 2026-08-17 | Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which a… |
| CVE-2026-9858 | MEDIUM | 4.3 | 2026-09-19 | The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.4 via the wxp_order_shipment, wxp_order… | |
| CVE-2026-9855 | MEDIUM | 6.5 | 2026-09-19 | The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'post_ID' parameter in all versions up to, and including, 2.7.8 due to insuffi… | |
| CVE-2026-9832 | MEDIUM | 5.3 | 2026-09-19 | The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in all versions up to, and including, 5… | |
| CVE-2026-98162 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix tree connection leak in smb2_tree_connect() See the procedure below: smb2_tree_conn… |
| CVE-2026-98161 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmem_submit_bio() records a REQ_PREFLUSH error, but con… |
| CVE-2026-98160 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() padapter->HalData is allocat… |
| CVE-2026-98159 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the load… |
| CVE-2026-98158 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends… |
| CVE-2026-98157 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation The poll_msec sysfs store file… |
| CVE-2026-98153 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called per-path and therefore… |
| CVE-2026-98152 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending disconnecting queues exceed t… |
| CVE-2026-98151 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged pr… |
| CVE-2026-98146 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain struct amdxdna_cmd_chain contains a f… |
| CVE-2026-98139 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters ntfs_cluster_free_from_rl_nolock() ad… |
| CVE-2026-98138 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when errors were recorded ntfs_put_super() and the remou… |
| CVE-2026-98137 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfs_dio_zero_range() returns either 0 or a … |
| CVE-2026-98135 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors_per_cluster in the boot sector is_boot_sector_ntfs() checks the boot sect… |
| CVE-2026-98134 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if register is null Nicholas Carlini reported a bug when veri… |
| CVE-2026-98133 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea(), the exit path unconditionally u… |
| CVE-2026-98132 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO states.c:__clean_func_state() can down… |
| CVE-2026-98131 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if the DMA mapping of an … |
| CVE-2026-98129 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() sas_port_alloc_num() can return NU… |
| CVE-2026-98128 | MEDIUM | Patched | 5.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() mpi3mr_get_tgtdev_by_addr() inc… |