[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112026 | 18 Oct 2026 | CVSS 3.7 | light0011 cmsA security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930… | |
| CVE-2026-112025 | 18 Oct 2026 | CVSS 7.3 | light0011 cmsA weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an… | |
| CVE-2026-109844 | 18 Oct 2026 | CVSS 4.3 | Gitea`GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching without checking that the user still had access to it… | |
| CVE-2026-110311 | 18 Oct 2026 | CVSS 4.3 | GiteaCreating a draft release through the API returned an `assets` list that was built from a release without an ID, which matched every attachment that… | |
| CVE-2026-110324 | 18 Oct 2026 | CVSS 6.5 | GiteaThe visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username}` (follow and unfollow) required only a… | |
| CVE-2026-110494 | 18 Oct 2026 | CVSS 6.3 | GiteaAdding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. A… | |
| CVE-2026-97204 | 18 Oct 2026 | CVSS 3.1 | GiteaDeleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences… | |
| CVE-2026-97859 | 18 Oct 2026 | CVSS 6.5 | GiteaSeven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, starred, subscriptions, keys and gpg_keys) were… | |
| CVE-2026-104627 | 18 Oct 2026 | CVSS 5.4 | GiteaThe Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without checking that the signed-in user had… | |
| CVE-2026-105661 | 18 Oct 2026 | CVSS 5.3 | GiteaRequesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home handler dereference a nil… | |
| CVE-2026-105964 | 18 Oct 2026 | CVSS 6.5 | GiteaThe Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit. A user who can run a workflow and… | |
| CVE-2026-107618 | 18 Oct 2026 | Not scored yet | Gitea`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a… | |
| CVE-2026-107686 | 18 Oct 2026 | CVSS 4.3 | GiteaThe Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users without write access, although… | |
| CVE-2026-109553 | 18 Oct 2026 | CVSS 7.5 | GiteaGitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When Gitea… | |
| CVE-2024-4457 | 18 Oct 2026 | CVSS 9.1 | WSO2 Enterprise IntegratorThe Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply… | |
| CVE-2026-111993 | 18 Oct 2026 | CVSS 3.3 | Soarkey StudentManagementA flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file… | |
| CVE-2026-111992 | 18 Oct 2026 | CVSS 6.3 | itsmeravitejak Online-Examination-SystemA vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the… | |
| CVE-2026-98866 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Add a… | |
| CVE-2026-98867 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persistent memory cache_key_decode()… | |
| CVE-2026-98868 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment cache_replay(), the writeback… | |
| CVE-2026-98856 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an… | |
| CVE-2026-98857 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblcr_new() and ip_vs_lblc_new()… | |
| CVE-2026-98858 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: io_uring: fix task_work add use-after-free with SQPOLL For SQPOLL, the sqpoll… | |
| CVE-2026-98859 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mt_remove()… | |
| CVE-2026-98860 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request As reported by… | |
| CVE-2026-98861 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()… | |
| CVE-2026-98862 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: audit: fix exe mark UAF in kill_rules() kill_rules() removes mixed AUDIT_DIR and… | |
| CVE-2026-98863 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Re-pend… | |
| CVE-2026-98864 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task ebf1ccff79c4… | |
| CVE-2026-98865 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't run ops.dequeue() with a DSQ lock held ops.dequeue() is invoked… | |
| CVE-2026-98847 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm_request_irq()… | |
| CVE-2026-98848 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before accessing .hws Commit f316cdff8d67 ("clk: Annotate… | |
| CVE-2026-98849 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: pfcp: fix socket lifetime on netdevice registration failure pfcp_newlink()… | |
| CVE-2026-98850 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TX_RING byte count overflow tpacket_snd() drains every… | |
| CVE-2026-98851 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable reference on init error path… | |
| CVE-2026-98852 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detection of tunneled packets Commit c4336a07eb6b ("net… | |
| CVE-2026-98853 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter… | |
| CVE-2026-98854 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as registered… | |
| CVE-2026-98855 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds… | |
| CVE-2026-98838 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vt: skip screen update for DEC alignment test on backgroup consoles [BUG]… | |
| CVE-2026-98839 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in… | |
| CVE-2026-98840 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF The… | |
| CVE-2026-98841 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driver_data before registering notification handlers Both… | |
| CVE-2026-98842 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetag_load_module() If codetag_load_module()… | |
| CVE-2026-98843 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data… | |
| CVE-2026-98844 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to… | |
| CVE-2026-98845 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tpm: Disable TPM on null key name mismatch The null key name check exists to… | |
| CVE-2026-98846 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sctp: check RCV_SHUTDOWN after the sendmsg connect wait sctp_wait_for_connect()… | |
| CVE-2026-98828 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9k_wmi_rsp_callback() removes… | |
| CVE-2026-98829 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop oversized fragments to avoid extra_len overflow In… | |
| CVE-2026-98830 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib()… | |
| CVE-2026-98831 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: of/overlay: don't leak fragment references when changeset init fails… | |
| CVE-2026-98832 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkg_tryget_closest() bio_set_dev() associates the… | |
| CVE-2026-98833 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the… | |
| CVE-2026-98834 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after… | |
| CVE-2026-98835 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Fix array boundary check The driver performs a sanity… | |
| CVE-2026-98836 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a… | |
| CVE-2026-98837 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the input device when probe fails setup_card() registers… | |
| CVE-2026-98818 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() Since kfree_rcu() can be… | |
| CVE-2026-98819 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in… | |
| CVE-2026-98820 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: blk-mq: set RQF_USE_SCHED when the operation is known The cached requests are… | |
| CVE-2026-98821 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: block: reject polled dio with user integrity metadata IOCB_HAS_METADATA leaves… | |
| CVE-2026-98822 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prevent AP VLAN tx from other interfaces Since the station lookup… | |
| CVE-2026-98823 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: preserve hidden-group beacon IE ownership A hidden-group… | |
| CVE-2026-98824 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate TX status rate metadata minstrel_ht_tx_status() converts… | |
| CVE-2026-98825 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()… | |
| CVE-2026-98826 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Fix clock provider use-after-free on probe failure… | |
| CVE-2026-98827 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE __hif_usb_tx() dequeues… | |
| CVE-2026-98810 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()… | |
| CVE-2026-98811 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: reclaim an empty proto on the error path Two racing tc filter… | |
| CVE-2026-98812 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctp_dev only after it is initialised mctp_add_dev() links… | |
| CVE-2026-98813 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Hold map BTF for the memory allocator destructor record bpf_ma_set_dtor()… | |
| CVE-2026-98814 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme: fix command effects log lifetime for multipath heads KASAN reported a… | |
| CVE-2026-98815 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko bot reported a potential problem for the cdev… | |
| CVE-2026-98816 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix overflow of jump offset in constant blinding bpf_jit_blind_insn()… | |
| CVE-2026-98817 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add better pm_runtime error handling in func probe Add a common error… | |
| CVE-2026-98800 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Wait for an RCU tasks grace period before freeing trampoline progs When a… | |
| CVE-2026-98801 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Commit 2bb2f5fb21b0… | |
| CVE-2026-98802 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA… | |
| CVE-2026-98803 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix rx Scatter-Gather support When a received frame is larger than… | |
| CVE-2026-98804 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() With… | |
| CVE-2026-98805 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: tipc: prevent GCM nonce reuse on peer key changes TIPC can encrypt traffic… | |
| CVE-2026-98806 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Previously… | |
| CVE-2026-98807 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds when handling team device events The… | |
| CVE-2026-98808 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: systemport: Fix buffer overflow in bcm_sysport_get_stats() When running on… | |
| CVE-2026-98809 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister… | |
| CVE-2026-98791 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference During XSK TX queue… | |
| CVE-2026-98792 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: generalize pending status bit Rename NF_FLOW_HW_PENDING to… | |
| CVE-2026-98793 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: reject invalid NAT manipulation types As bpf_ct_set_nat_info() is… | |
| CVE-2026-98794 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipvs: filter some flags received in the backup server While the IPVS SYNC… | |
| CVE-2026-98795 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: sparx5: skip ptp deinit if init was skipped sparx5_ptp_init() returns early… | |
| CVE-2026-98796 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner The RX rings and the… | |
| CVE-2026-98797 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: cap skb->queue_mapping when the tx queue is picked skbedit can set… | |
| CVE-2026-98798 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix NULL dereference in set_coalesce before first open The Rx ring… | |
| CVE-2026-98799 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Skip detached progs in trampoline images that are still in use… | |
| CVE-2026-98781 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not… | |
| CVE-2026-98782 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtk_drm_probe() creates an OVL… | |
| CVE-2026-98783 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device… | |
| CVE-2026-98784 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firmware requested in… | |
| CVE-2026-98785 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend… |
Page 35 of 168