CVE Vulnerability Database
Search and browse 398,366 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-43088 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: af_key: zero aligned sockaddr tail in PF_KEY e... |
| CVE-2026-43087 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Disable all pin interrupts durin... |
| CVE-2026-43086 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ip_vs_add_service error pat... |
| CVE-2026-43085 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in NL... |
| CVE-2026-43084 | HIGH | 7.8 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: make hash table per que... |
| CVE-2026-43083 | CRITICAL | 9.1 | 0.4% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: ioam6: fix OOB and missing lock When trace->t... |
| CVE-2026-43082 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: leave space for null terminators on pro... |
| CVE-2026-43081 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix GENERIC_CMD register field masks for ... |
| CVE-2026-43080 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets with UDP encap syzbot rep... |
| CVE-2026-43079 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Skip discovery table for off... |
| CVE-2026-43078 | HIGH | 7.8 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix page reassignment overflow in ... |
| CVE-2026-43077 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for ... |
| CVE-2026-43076 | HIGH | 7.8 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline data i_size during inode rea... |
| CVE-2026-43075 | HIGH | 7.8 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2_write_end_i... |
| CVE-2026-43074 | HIGH | 7.8 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace... |
| CVE-2026-42509 | MEDIUM | 6.1 | 0.4% | May 6, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. Th... |
| CVE-2026-40010 | CRITICAL | 9.1 | 0.4% | May 6, 2026 | Missing invocation of Servlet http web request method changeSessionId after session binding can be exploited for a sessi... |
| CVE-2026-40001 | MEDIUM | 5.2 | 0.1% | May 6, 2026 | There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which... |
| CVE-2026-35255 | MEDIUM | 6.6 | 0.2% | May 6, 2026 | Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The ... |
| CVE-2026-1719 | HIGH | 7.5 | 0.3% | May 6, 2026 | The Gravity Bookings Premium plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2... |
| CVE-2026-7841 | HIGH | 8.8 | 0.6% | May 6, 2026 | A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user... |
| CVE-2026-7457 | MEDIUM | 6.4 | 0.3% | May 6, 2026 | The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.... |
| CVE-2026-7448 | — | — | — | May 6, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-7332 | HIGH | 7.2 | 0.4% | May 6, 2026 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-S... |
| CVE-2026-6672 | MEDIUM | 6.4 | 0.2% | May 6, 2026 | The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via s... |