CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-103310 json | The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notificatio... | |
| CVE-2026-101184 json | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect av... | |
| CVE-2026-101178 json | Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may af... | |
| CVE-2026-18199 json | Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authent... | |
| CVE-2026-120349 json | A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of th... | |
| CVE-2026-101186 json | DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| CVE-2026-101185 json | OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service con... | |
| CVE-2026-101183 json | UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availabili... | |
| CVE-2026-101182 json | Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect... | |
| CVE-2026-101181 json | Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect servi... | |
| CVE-2026-101180 json | DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| CVE-2026-101179 json | Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect av... | |
| CVE-2026-101177 json | Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect se... | |
| CVE-2026-101176 json | Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnera... | |
| CVE-2026-101175 json | Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect... | |
| CVE-2026-101174 json | DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| CVE-2026-101173 json | DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| CVE-2026-101172 json | Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect co... | |
| CVE-2026-101171 json | Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerabil... | |
| CVE-2026-101170 json | DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | |
| CVE-2026-86567 json | A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leadi... | |
| CVE-2026-86565 json | A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an ... | |
| CVE-2026-86563 json | A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access. | |
| CVE-2026-86562 json | A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with att... | |
| CVE-2026-81799 json | Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite allo... | |
| CVE-2026-28160 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vik... | |
| CVE-2026-120348 json | A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_conte... | |
| CVE-2026-120347 json | A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/Vi... | |
| CVE-2026-120345 json | A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bi... | |
| CVE-2026-102560 json | A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, trunca... | |
| CVE-2026-102559 json | A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values... | |
| CVE-2026-102558 json | A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming... | |
| CVE-2026-102557 json | A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately ca... | |
| CVE-2026-102556 json | A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signa... | |
| CVE-2026-78410 json | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the ... | |
| CVE-2025-11969 json | The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute... | |
| CVE-2024-5617 json | The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical user... | |
| CVE-2026-83596 json | A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. | |
| CVE-2026-78408 json | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later... | |
| CVE-2026-78376 json | A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handl... | |
| CVE-2026-71227 json | A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) int... | |
| CVE-2026-71226 json | Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted... | |
| CVE-2026-71225 json | A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful ... | |
| CVE-2026-14330 json | Multiple unbounded alloca() calls in the PulseAudio protocol server. | |
| CVE-2026-13595 json | A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and Uni... | |
| CVE-2026-120344 json | A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the function system of the file /b... | |
| CVE-2026-120343 json | A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file man... | |
| CVE-2026-120342 json | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project. The affected element is an unknown function of the f... | |
| CVE-2026-120341 json | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the... | |
| CVE-2026-120340 json | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project. This issue affects some unknown processing of the ... | |
| CVE-2025-11395 json | A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files... | |
| CVE-2026-120339 json | A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project. This vulnerability affects unknown code of th... | |
| CVE-2026-120337 json | A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of ... | |
| CVE-2026-120336 json | A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in t... | |
| CVE-2026-120194 json | A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a... | |
| CVE-2026-18147 json | A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability ... | |
| CVE-2026-79678 json | A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a const... | |
| CVE-2026-76578 json | A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attri... | |
| CVE-2026-74860 json | A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a s... | |
| CVE-2026-73198 json | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpo... | |
| CVE-2026-73197 json | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST... | |
| CVE-2026-19550 json | A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather th... | |
| CVE-2026-13097 json | A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in... | |
| CVE-2026-11861 json | A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory u... | |
| CVE-2025-6170 json | A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an... | |
| CVE-2026-68591 json | In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of pri... | |
| CVE-2026-68590 json | In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of ser... | |
| CVE-2026-68589 json | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi... | |
| CVE-2026-68588 json | In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service,... | |
| CVE-2026-20600 json | In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE ha... | |
| CVE-2026-20599 json | In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation ... | |
| CVE-2026-20598 json | In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if ... | |
| CVE-2026-20597 json | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, ... | |
| CVE-2026-20596 json | In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of servic... | |
| CVE-2026-20595 json | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of ... | |
| CVE-2026-20594 json | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, ... | |
| CVE-2026-20593 json | In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service... | |
| CVE-2026-20592 json | In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local inf... | |
| CVE-2026-20591 json | In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalati... | |
| CVE-2026-20590 json | In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious ... | |
| CVE-2026-20585 json | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of priv... | |
| CVE-2026-20584 json | In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege... | |
| CVE-2026-20583 json | In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious act... | |
| CVE-2026-20582 json | In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malic... | |
| CVE-2026-20581 json | In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a ma... | |
| CVE-2026-20580 json | In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious act... | |
| CVE-2026-20578 json | In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote de... | |
| CVE-2026-20577 json | In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a ... | |
| CVE-2026-20576 json | In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile... | |
| CVE-2026-20575 json | In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a ma... | |
| CVE-2026-20574 json | In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a ma... | |
| CVE-2026-20573 json | In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malic... | |
| CVE-2026-20572 json | In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege... | |
| CVE-2026-20571 json | In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a ma... | |
| CVE-2026-20570 json | In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege ... | |
| CVE-2026-20569 json | In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a m... | |
| CVE-2026-20568 json | In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicio... | |
| CVE-2026-20567 json | In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile... | |
| CVE-2026-20566 json | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service,... | |
| CVE-2026-20565 json | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of pr... |