Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
25301
Total
1888
Critical
7733
High
7926
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-53341 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() may_decode_fh() accesses mount::mnt_ns without holding … | Jul 01, 2026 |
| CVE-2026-53340 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2c_imx_runtime_suspend(), the clock … | Jul 01, 2026 |
| CVE-2026-53339 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() On all modern platforms Qualcomm CCI controller … | Jul 01, 2026 |
| CVE-2026-53338 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues() of_reserved_mem_lookup() may return NULL if the … | Jul 01, 2026 |
| CVE-2026-53337 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bond_do_ioctl() In bond_do_ioctl(), slave_dev is obtained via __dev_get_by_name() … | Jul 01, 2026 |
| CVE-2026-53336 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a … | Jul 01, 2026 |
| CVE-2026-53335 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: handle ctx allocation failure DAMON_LRU_SORT allocates the damon_ctx object for its kdamond in its … | Jul 01, 2026 |
| CVE-2026-53334 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: handle ctx allocation failure Patch series "mm/damon/{reclaim,lru_sort}: handle ctx allocation failures". DAMON_RECLAIM and DAMON_LRU_SORT … | Jul 01, 2026 |
| CVE-2026-53333 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mm/mincore: handle non-swap entries before !CONFIG_SWAP guard mincore_swap() also fields migration/hwpoison entries (and shmem swapin-error … | Jul 01, 2026 |
| CVE-2026-53332 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with … | Jul 01, 2026 |
| CVE-2026-53331 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock During the SSR/PDR down notification the tx_lock is taken … | Jul 01, 2026 |
| CVE-2026-53330 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() [Why & How] The aux_rd_interval array in struct dc_lttpr_caps … | Jul 01, 2026 |
| CVE-2026-53329 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector_reserve() [Why & How] dal_vector_reserve() computes the allocation size as "capacity … | Jul 01, 2026 |
| CVE-2026-53328 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() A WARN fires when systemd's user manager … | Jul 01, 2026 |
| CVE-2026-53327 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fill_pool() if pi_blocked_on On RT enabled kernels, fill_pool() ends up calling rtlock_lock(), … | Jul 01, 2026 |
| CVE-2026-53326 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't call fill_pool() in early boot hardirq context When booting a debug PREEMPT_RT kernel … | Jul 01, 2026 |
| CVE-2026-13603 | UNKNOWN | — | The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, and potentially others based on Oppwa's technology. The integration of Oppwa, following … | Jul 01, 2026 |
| CVE-2026-8387 | LOW | 2.4 | A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.extractall()` method in `StorageManager._extract_to_cache()`. … | Jul 01, 2026 |
| CVE-2026-5120 | HIGH | 8.1 | A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user. | Jul 01, 2026 |
| CVE-2026-53909 | UNKNOWN | — | MCO does not correctly validate types of uploaded files. File upload validation functionality relies only on client-side checks, which can be bypassed. An authorized, low-privileged … | Jul 01, 2026 |
| CVE-2026-53908 | UNKNOWN | — | MCO is vulnerable to User Enumeration through authentication-related functionalities. The application returns distinguishable responses for valid and invalid users during username reminder and password reset … | Jul 01, 2026 |
| CVE-2026-53907 | UNKNOWN | — | MCO is vulnerable to Stored Cross‑Site Scripting (XSS) via the application logo upload functionality. An attacker with the ability to change the application logo can … | Jul 01, 2026 |
| CVE-2026-53906 | UNKNOWN | — | MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality related to data export and upload. Improper validation of the filename parameter … | Jul 01, 2026 |
| CVE-2026-53905 | UNKNOWN | — | MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree-structure endpoint. An authenticated, low-privileged user can retrieve administrator access control structures without proper authorization checks. … | Jul 01, 2026 |
| CVE-2026-53904 | UNKNOWN | — | MCO is vulnerable to Account Denial of Service due to improper implementation of password reset functionality. Each password reset request invalidates previously set password as … | Jul 01, 2026 |