CVE Vulnerability Database
Search and browse 425,147 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-100174 | MEDIUM | 5.1 | — | Sep 25, 2026 | The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS).... |
| CVE-2026-100172 | HIGH | 8.5 | — | Sep 25, 2026 | The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 t... |
| CVE-2026-100079 | MEDIUM | 5.5 | 0.1% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on tea... |
| CVE-2026-100078 | MEDIUM | 5.5 | 0.1% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to functi... |
| CVE-2026-100077 | MEDIUM | 5.5 | 0.2% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before retire hung submit Duri... |
| CVE-2026-100076 | MEDIUM | 5.5 | 0.2% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks o... |
| CVE-2026-100075 | CRITICAL | 9.8 | 0.4% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters... |
| CVE-2026-100074 | MEDIUM | 5.5 | 0.1% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUN... |
| CVE-2026-100073 | MEDIUM | 5.5 | 0.1% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Co... |
| CVE-2026-100072 | HIGH | 7.8 | 0.1% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() ... |
| CVE-2026-100071 | MEDIUM | 5.5 | 0.2% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failur... |
| CVE-2026-100070 | MEDIUM | 5.5 | 0.2% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrin... |
| CVE-2026-95832 | CRITICAL | 9.3 | 0.2% | Sep 25, 2026 | Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code h... |
| CVE-2026-88421 | HIGH | 7.5 | 0.3% | Sep 25, 2026 | Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthentica... |
| CVE-2026-88420 | MEDIUM | 5.4 | 0.2% | Sep 25, 2026 | A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through ... |
| CVE-2026-79153 | HIGH | 7.8 | 0.1% | Sep 25, 2026 | Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driv... |
| CVE-2026-78902 | MEDIUM | 6.1 | 0.3% | Sep 25, 2026 | Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via t... |
| CVE-2026-52622 | HIGH | 7.5 | 0.3% | Sep 25, 2026 | An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 befo... |
| CVE-2026-51773 | HIGH | 8.1 | 0.3% | Sep 25, 2026 | An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously... |
| CVE-2026-51772 | MEDIUM | 6.5 | 0.3% | Sep 25, 2026 | A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multi... |
| CVE-2025-51457 | HIGH | 8.8 | 1.3% | Sep 25, 2026 | D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at ... |
| CVE-2026-97622 | — | — | — | Sep 25, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-62062. Reason: This candidate is a ... |
| CVE-2026-98159 | MEDIUM | 5.5 | 0.1% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records ... |
| CVE-2026-98158 | MEDIUM | 5.5 | 0.2% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resett... |
| CVE-2026-98157 | MEDIUM | 5.5 | 0.2% | Sep 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec t... |