CVE Vulnerability Database
Search and browse 397,909 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-43497 | HIGH | 7.3 | 0.1% | May 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to preven... |
| CVE-2026-43496 | MEDIUM | 5.5 | 0.1% | May 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call wit... |
| CVE-2026-43495 | HIGH | 8.8 | 0.3% | May 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate port_count against messag... |
| CVE-2026-43494 | HIGH | 7.8 | 0.3% | May 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fail... |
| CVE-2026-0393 | MEDIUM | 6.5 | 0.2% | May 21, 2026 | The affected product may expose credentials remotely between low privileged visualization users during concurrent login ... |
| CVE-2026-45255 | HIGH | 7.5 | 0.3% | May 21, 2026 | When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and u... |
| CVE-2026-45254 | MEDIUM | 6.5 | 0.2% | May 21, 2026 | In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key ... |
| CVE-2026-45253 | HIGH | 8.4 | 0.2% | May 21, 2026 | ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a... |
| CVE-2026-45252 | MEDIUM | 5.5 | 0.3% | May 21, 2026 | When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace ... |
| CVE-2026-45251 | HIGH | 7.8 | 0.2% | May 21, 2026 | A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor. B... |
| CVE-2026-42396 | MEDIUM | 6.5 | 0.4% | May 21, 2026 | Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail |
| CVE-2026-42002 | HIGH | 7.5 | 0.3% | May 21, 2026 | Concurrency and locking defects in GSS-TSIG |
| CVE-2026-42001 | HIGH | 7.5 | 0.4% | May 21, 2026 | Insufficient Validation of Autoprimary SOA Queries |
| CVE-2026-42000 | HIGH | 8.6 | 0.2% | May 21, 2026 | Insufficient Validation of Names During AXFR |
| CVE-2026-41999 | MEDIUM | 4.8 | 0.1% | May 21, 2026 | Incorrect Behaviour of Views with TCP PROXY Requests |
| CVE-2026-39461 | HIGH | 8.8 | 0.2% | May 21, 2026 | libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for ... |
| CVE-2026-28764 | HIGH | 7.8 | 0.2% | May 21, 2026 | A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): ... |
| CVE-2026-9157 | HIGH | 8.6 | 0.1% | May 21, 2026 | Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remo... |
| CVE-2026-7837 | LOW | 3.7 | 0.2% | May 21, 2026 | A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-pr... |
| CVE-2026-5434 | MEDIUM | 5.9 | 0.2% | May 21, 2026 | Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An atta... |
| CVE-2026-5433 | CRITICAL | 9.1 | 0.9% | May 21, 2026 | Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could ... |
| CVE-2026-4858 | CRITICAL | 9.9 | 0.2% | May 21, 2026 | Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration ... |
| CVE-2026-45250 | HIGH | 7.8 | 0.4% | May 21, 2026 | The setcred(2) system call is only available to privileged users. However, before the privilege level of the caller is ... |
| CVE-2026-44075 | LOW | 3.7 | 0.3% | May 21, 2026 | A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch... |
| CVE-2026-44074 | LOW | 3.7 | 0.3% | May 21, 2026 | Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when mu... |