Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
28433
Total
2190
Critical
8535
High
8856
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-9818 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | May 28, 2026 |
| CVE-2026-9658 | UNKNOWN | — | Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths. The header injection rule was ineffective at blocking header injections in … | May 28, 2026 |
| CVE-2026-40914 | UNKNOWN | — | A vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the consume or send permission on … | May 28, 2026 |
| CVE-2026-9813 | UNKNOWN | — | FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py. An attacker who can … | May 28, 2026 |
| CVE-2026-4377 | UNKNOWN | — | Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how … | May 28, 2026 |
| CVE-2026-47074 | UNKNOWN | — | Improper Certificate Validation vulnerability in ex-aws ex_aws_sns (ExAws.SNS, ExAws.SNS.PublicKeyCache modules) allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/ex_aws/sns.ex, lib/ex_aws/sns/public_key_cache.ex … | May 28, 2026 |
| CVE-2026-46241 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration failure Make sure to disable and free the interrupts … | May 28, 2026 |
| CVE-2026-46240 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_release_internal_buffers() The recent change in commit 1dabf00ee206 ("media: iris: gen1: … | May 28, 2026 |
| CVE-2026-46239 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl Three control cases (AUTOGAIN, EXPOSURE_AUTO, … | May 28, 2026 |
| CVE-2026-46238 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop caching unowned originator pointers in BAT IV BAT IV keeps the last-hop neighbor … | May 28, 2026 |
| CVE-2026-46237 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Avoid overflow on msg bound check As pointed out by SDL, the previous condition … | May 28, 2026 |
| CVE-2026-46236 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO must not be part of … | May 28, 2026 |
| CVE-2026-46235 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: saa7164: add ioremap return checks and cleanups Add checks for ioremap return values in … | May 28, 2026 |
| CVE-2026-46234 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_update_buffer_size(), the buffer size was being clamped to … | May 28, 2026 |
| CVE-2026-46233 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: only purge non-released claims When batadv_bla_purge_claims() goes through the list of claims, it … | May 28, 2026 |
| CVE-2026-46232 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Clamp num_touch_reports A device would never lie about the number of touch reports … | May 28, 2026 |
| CVE-2026-46231 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert When batadv_bla_add_claim() fails to insert … | May 28, 2026 |
| CVE-2026-46230 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg Check bounds against the end of the … | May 28, 2026 |
| CVE-2026-46229 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure KFD VRAM allocations set AMDGPU_GEM_CREATE_VRAM_WIPE_ON_RELEASE … | May 28, 2026 |
| CVE-2026-46228 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix devres lifetime USB drivers bind to USB interfaces and any device managed … | May 28, 2026 |
| CVE-2026-46227 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs … | May 28, 2026 |
| CVE-2026-46226 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: spi: fsl: fix controller deregistration Make sure to deregister the controller before releasing underlying resources … | May 28, 2026 |
| CVE-2026-46225 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: spi: rspi: fix controller deregistration Make sure to deregister the controller before releasing underlying resources … | May 28, 2026 |
| CVE-2026-46224 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure When drm_gpuvm_resv_object_alloc() fails, the pre-allocated storage … | May 28, 2026 |
| CVE-2026-46223 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: cgroup: Defer css percpu_ref kill on rmdir until cgroup is depopulated A chain of commits … | May 28, 2026 |