Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
27118
Total
2050
Critical
8216
High
8419
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-11554 | MEDIUM | 4.3 | A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747. This vulnerability affects unknown code of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes least … | Jun 08, 2026 |
| CVE-2026-11553 | HIGH | 8.8 | A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename … | Jun 08, 2026 |
| CVE-2026-11552 | MEDIUM | 5.3 | A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue … | Jun 08, 2026 |
| CVE-2026-48507 | HIGH | 7.1 | Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user holding only the granular `users.edit` permission to … | Jun 08, 2026 |
| CVE-2026-46481 | HIGH | 8.3 | OpenMetadata is a unified metadata platform. Prior to version 1.12.4, a non-admin SSO user can trigger a TEST_CONNECTION workflow for a Database Service and receive, … | Jun 08, 2026 |
| CVE-2026-46314 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension to prevent infinite loop v3d_get_extensions() walks a userspace-provided singly-linked list … | Jun 08, 2026 |
| CVE-2026-46313 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path isp->psys is confirmed to be … | Jun 08, 2026 |
| CVE-2026-46312 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap vb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP and I … | Jun 08, 2026 |
| CVE-2026-46311 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to take both locks i.e vm … | Jun 08, 2026 |
| CVE-2026-46310 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on module unload When unloading the module on … | Jun 08, 2026 |
| CVE-2026-46309 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise Add validation in xe_vm_madvise_ioctl() … | Jun 08, 2026 |
| CVE-2026-46308 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy() In scpsys_get_bus_protection_legacy(), of_find_node_with_property() returns a device node with its … | Jun 08, 2026 |
| CVE-2026-46307 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k driver seems to … | Jun 08, 2026 |
| CVE-2026-46306 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol Field … | Jun 08, 2026 |
| CVE-2026-46305 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc The return value of kzalloc_flex() is … | Jun 08, 2026 |
| CVE-2026-46304 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_release_queue_work() runs on nvmet-wq and can drop the … | Jun 08, 2026 |
| CVE-2026-46303 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->cont_extent verbatim from … | Jun 08, 2026 |
| CVE-2026-46302 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently there can only be a single open of … | Jun 08, 2026 |
| CVE-2026-46301 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue … | Jun 08, 2026 |
| CVE-2026-46299 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super() hfsplus_fill_super() calls hfs_find_init() to initialize a search structure, … | Jun 08, 2026 |
| CVE-2026-46298 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executing ->ioctl handler or ->release handler, if an … | Jun 08, 2026 |
| CVE-2026-46297 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt Currently, request_threaded_irq() is used with a primary … | Jun 08, 2026 |
| CVE-2026-46296 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel allocation from probe() … | Jun 08, 2026 |
| CVE-2026-46295 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty Fall back to … | Jun 08, 2026 |
| CVE-2026-46294 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer … | Jun 08, 2026 |