CVE Vulnerability Database
Search and browse 423,945 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-98390 | — | — | 0.2% | Oct 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized s... |
| CVE-2026-98389 | — | — | 0.2% | Oct 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GP... |
| CVE-2026-98388 | — | — | 0.2% | Oct 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_... |
| CVE-2026-98387 | — | — | 0.2% | Oct 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling... |
| CVE-2026-98386 | — | — | 0.2% | Oct 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memset_io() to clear QLAFX00 req... |
| CVE-2026-94348 | MEDIUM | 6.1 | — | Oct 14, 2026 | Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in... |
| CVE-2026-35161 | MEDIUM | 5.3 | — | Oct 14, 2026 | Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulner... |
| CVE-2026-110690 | HIGH | 7.5 | 0.9% | Oct 14, 2026 | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/p... |
| CVE-2026-110652 | MEDIUM | 4 | 0.4% | Oct 14, 2026 | ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /do... |
| CVE-2026-108065 | CRITICAL | 9.8 | 0.8% | Oct 14, 2026 | SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCom... |
| CVE-2026-107870 | HIGH | 7.1 | 0.3% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngi... |
| CVE-2026-104086 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (Squashf... |
| CVE-2026-101217 | MEDIUM | 6.5 | 0.6% | Oct 14, 2026 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Di... |
| CVE-2026-101216 | MEDIUM | 6.6 | — | Oct 14, 2026 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in ... |
| CVE-2026-101215 | MEDIUM | 6.6 | — | Oct 14, 2026 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in ... |
| CVE-2026-97278 | HIGH | 7.2 | — | Oct 14, 2026 | Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affect... |
| CVE-2026-82026 | HIGH | 8.8 | 0.9% | Oct 14, 2026 | Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/l... |
| CVE-2026-16741 | CRITICAL | 9.8 | 1.7% | Oct 14, 2026 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber ... |
| CVE-2026-16740 | CRITICAL | 9.8 | 1.7% | Oct 14, 2026 | Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and ... |
| CVE-2026-109968 | MEDIUM | 5.5 | 0.1% | Oct 14, 2026 | A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption pass... |
| CVE-2026-108291 | CRITICAL | 9.8 | 0.5% | Oct 14, 2026 | Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affe... |
| CVE-2026-107867 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProd... |
| CVE-2026-107433 | MEDIUM | 6.5 | — | Oct 14, 2026 | Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrect... |
| CVE-2026-107426 | HIGH | 7.3 | — | Oct 14, 2026 | Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting I... |
| CVE-2026-107425 | MEDIUM | 6.5 | 0.3% | Oct 14, 2026 | Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-... |