Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
41987
Total
3420
Critical
12405
High
12324
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-80742 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't send zero-byte data in tpacket_snd(). syzbot reported a WARNING in __dev_queue_xmit() triggered via … | Sep 03, 2026 |
| CVE-2026-80741 | HIGH | 7.1 | In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm_log_draw_kmsg_record() accesses s[len - 1] to strip … | Sep 03, 2026 |
| CVE-2026-80740 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large … | Sep 03, 2026 |
| CVE-2026-80739 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case __mlx5e_add_fdb_flow() fails … | Sep 03, 2026 |
| CVE-2026-80738 | HIGH | 7.3 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie accept a socket pointer 'sk' … | Sep 03, 2026 |
| CVE-2026-80737 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengine_terminate_all() does not wait for a running callback, so the … | Sep 03, 2026 |
| CVE-2026-80736 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAX_GROUPS, … | Sep 03, 2026 |
| CVE-2026-80735 | HIGH | 7.3 | In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref sk_user_data Some subsystems, like BPF SOCKMAP, … | Sep 03, 2026 |
| CVE-2026-80734 | HIGH | 8.8 | In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes [BUG] When running generic/795 with 8K block … | Sep 03, 2026 |
| CVE-2026-80733 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc_loop() can be called for sockets that are neither AF_INET … | Sep 03, 2026 |
| CVE-2026-80732 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-free pci_get_slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: … | Sep 03, 2026 |
| CVE-2026-80731 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header dev_validate_header() reads dev->hard_header_len directly when zero-padding short link layer … | Sep 03, 2026 |
| CVE-2026-80730 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERR_PTR to kthread_stop() In test_ringbuffer()'s out_free cleanup loop, the check `!rb_threads[cpu]` … | Sep 03, 2026 |
| CVE-2026-80729 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise workingset state before folio split xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes, but __folio_split() … | Sep 03, 2026 |
| CVE-2026-80728 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was … | Sep 03, 2026 |
| CVE-2026-80727 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one … | Sep 03, 2026 |
| CVE-2026-80726 | CRITICAL | 9.3 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid … | Sep 03, 2026 |
| CVE-2026-80465 | HIGH | 8.7 | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.3), Mendix … | Sep 03, 2026 |
| CVE-2026-80254 | MEDIUM | 6.5 | Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other … | Sep 03, 2026 |
| CVE-2026-80253 | MEDIUM | 6.8 | An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without … | Sep 03, 2026 |
| CVE-2026-79679 | HIGH | 8.7 | Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: … | Sep 03, 2026 |
| CVE-2026-78304 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | Sep 03, 2026 |
| CVE-2026-78080 | UNKNOWN | — | Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi … | Sep 03, 2026 |
| CVE-2026-78069 | UNKNOWN | — | Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - `J2StoreControllerApps`'s `appTask` delegation path instantiates app-plugin controllers … | Sep 03, 2026 |
| CVE-2026-78065 | UNKNOWN | — | Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - `editAddress()` redirected non-owners away only … | Sep 03, 2026 |