CVE Vulnerability Database
Search and browse 397,994 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44289 | HIGH | 7.5 | 0.6% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recu... |
| CVE-2026-44288 | MEDIUM | 5.3 | 0.3% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a... |
| CVE-2026-43489 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo_file: remember retrieve() status L... |
| CVE-2026-43488 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controll... |
| CVE-2026-43487 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102... |
| CVE-2026-43486 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix set_access_flags() no-op check ... |
| CVE-2026-43485 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: nouveau/gsp: drop WARN_ON in ACPI probes These WAR... |
| CVE-2026-43484 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flag... |
| CVE-2026-43483 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Set/clear CR8 write interception when AVI... |
| CVE-2026-43482 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Disable preemption between scx_claim_exi... |
| CVE-2026-43481 | HIGH | 7.8 | 0.1% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: net-shapers: don't free reply skb after genlmsg_rep... |
| CVE-2026-43480 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp3x-rt5682-max9836: Add missing error ... |
| CVE-2026-43479 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_loc... |
| CVE-2026-43478 | MEDIUM | 5.5 | 0.1% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1011: Use component to get the dapm... |
| CVE-2026-43477 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling ... |
| CVE-2026-43476 | HIGH | 7.8 | 0.1% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_... |
| CVE-2026-42946 | HIGH | 7.4 | 0.9% | May 13, 2026 | A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory... |
| CVE-2026-42945 | HIGH | 8.1 | 68.0% | May 13, 2026 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists w... |
| CVE-2026-42937 | HIGH | 7.1 | 0.2% | May 13, 2026 | Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and i... |
| CVE-2026-42934 | MEDIUM | 6.3 | 0.7% | May 13, 2026 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charse... |
| CVE-2026-42930 | HIGH | 8.7 | 0.5% | May 13, 2026 | When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Applia... |
| CVE-2026-42926 | MEDIUM | 6.3 | 0.3% | May 13, 2026 | When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set... |
| CVE-2026-42924 | HIGH | 8.7 | 0.2% | May 13, 2026 | An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects th... |
| CVE-2026-42920 | HIGH | 8.7 | 0.3% | May 13, 2026 | When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic ca... |
| CVE-2026-42919 | HIGH | 7.1 | 0.3% | May 13, 2026 | A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with administrative access to escalate... |