Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
25301
Total
1888
Critical
7733
High
7926
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-24246 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this … | Jul 01, 2026 |
| CVE-2026-24245 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24244 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24243 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-24242 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to … | Jul 01, 2026 |
| CVE-2026-24240 | HIGH | 7.8 | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead … | Jul 01, 2026 |
| CVE-2026-13707 | UNKNOWN | — | Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, … | Jul 01, 2026 |
| CVE-2026-13706 | UNKNOWN | — | Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php. | Jul 01, 2026 |
| CVE-2025-23351 | CRITICAL | 9.0 | NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out … | Jul 01, 2026 |
| CVE-2025-23350 | CRITICAL | 9.0 | NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out … | Jul 01, 2026 |
| CVE-2025-15646 | CRITICAL | 9.8 | HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the <template> element was added to libgumbo 0.10.0 in 2015, but … | Jul 01, 2026 |
| CVE-2026-6688 | HIGH | 7.6 | FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN enabled, fno.fname can be up to 255 characters; … | Jul 01, 2026 |
| CVE-2026-6687 | HIGH | 7.6 | FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums. This maps to … | Jul 01, 2026 |
| CVE-2026-6686 | MEDIUM | 4.6 | FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-filling newly allocated clusters. This maps to CWE-908 (Use … | Jul 01, 2026 |
| CVE-2026-6685 | MEDIUM | 6.1 | FatFs R0.16 and earlier exhibits a stale dirty-cache skip via unsigned-subtraction wrap in f_read() / f_write() (fp->sect - sect < cc) during interleaved read/write on … | Jul 01, 2026 |
| CVE-2026-6684 | MEDIUM | 4.6 | FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived from GPT header field … | Jul 01, 2026 |
| CVE-2026-6683 | MEDIUM | 4.6 | FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero during write/sync operations. … | Jul 01, 2026 |
| CVE-2026-6682 | HIGH | 7.6 | In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-controlled file-size metadata and … | Jul 01, 2026 |
| CVE-2026-6283 | MEDIUM | 5.4 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from … | Jul 01, 2026 |
| CVE-2026-5220 | MEDIUM | 6.4 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS. This issue affects DivvyDrive: from … | Jul 01, 2026 |
| CVE-2026-5142 | MEDIUM | 6.5 | A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from … | Jul 01, 2026 |
| CVE-2026-5138 | MEDIUM | 4.3 | A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope … | Jul 01, 2026 |
| CVE-2026-5135 | MEDIUM | 6.5 | A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override … | Jul 01, 2026 |
| CVE-2026-58399 | UNKNOWN | — | @acastellon/auth is an authentication control system for microservices. Versions prior to 2.3.0 appear to allow an unauthenticated authentication bypass in validateToken() through spoofable auth-user and … | Jul 01, 2026 |
| CVE-2026-58035 | UNKNOWN | — | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Special.Block/SpecialBlock.Vue. | Jul 01, 2026 |