CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-116228 json | A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/... | |
| CVE-2026-116227 json | A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Ser... | |
| CVE-2026-116224 json | A vulnerability has been found in fr0tt benotes up to 2.8.1. This affects the function getUrlInfo of the file app/Http/Contro... | |
| CVE-2026-116223 json | A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Ex... | |
| CVE-2026-116124 json | A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_... | |
| CVE-2026-111974 json | The GiveWP WordPress plugin before 4.19.0.1 does not restrict the currency of a donation to the one the site or form accepts,... | |
| CVE-2026-107900 json | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Openi... | |
| CVE-2026-107899 json | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::Che... | |
| CVE-2026-107898 json | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::Mac... | |
| CVE-2026-107897 json | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. O... | |
| CVE-2026-107896 json | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load_gr_item. Opening a ... | |
| CVE-2026-107895 json | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead t... | |
| CVE-2026-107894 json | V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may... | |
| CVE-2026-116106 json | A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown fu... | |
| CVE-2026-116105 json | A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest... | |
| CVE-2026-103381 json | The Mintpay for WooCommerce WordPress plugin through 2.2.3 does not verify the authenticity of the payment callback it proces... | |
| CVE-2026-103319 json | The OPay Payment Gateway for WooCommerce WordPress plugin through 2.5.5 does not properly verify that payment notifications o... | |
| CVE-2026-103306 json | The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not properly verify the authenticity of its paymen... | |
| CVE-2026-103300 json | The Eurobank WooCommerce Payment Gateway WordPress plugin through 2.1.1 does not verify that a payment-confirmation request g... | |
| CVE-2026-103299 json | The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured before using it to authenti... | |
| CVE-2026-103298 json | The CCAvenue Payment Gateway for WooCommerce WordPress plugin through 3.1 does not verify that a payment-confirmation request... | |
| CVE-2026-99083 json | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in krb5_authenticate... | |
| CVE-2026-99080 json | In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode() For m... | |
| CVE-2026-99036 json | In the Linux kernel, the following vulnerability has been resolved: dm: fix reading free memory in do_resume When do_resume... | |
| CVE-2026-98945 json | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a na... | |
| CVE-2026-98944 json | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and si... | |
| CVE-2026-98942 json | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Build the cid tables privately and publish th... | |
| CVE-2026-98937 json | In the Linux kernel, the following vulnerability has been resolved: perf/core: Check kernel access when kernel callchains ar... | |
| CVE-2026-98926 json | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS [Why] stre... | |
| CVE-2026-98917 json | In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32kb For 64-bit L... | |
| CVE-2026-98916 json | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change ... | |
| CVE-2026-98915 json | In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device on dri... | |
| CVE-2026-98914 json | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap ne... | |
| CVE-2026-98913 json | In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_probe() ... | |
| CVE-2026-98912 json | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next ev... | |
| CVE-2026-98911 json | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() I... | |
| CVE-2026-98910 json | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copy_to_user fai... | |
| CVE-2026-98909 json | In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: unregister devlink on port registration f... | |
| CVE-2026-98908 json | In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flowe... | |
| CVE-2026-98907 json | In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock ... | |
| CVE-2026-98906 json | In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966... | |
| CVE-2026-98905 json | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU resto... | |
| CVE-2026-98904 json | In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devm_pm_runtime_enable() sashiko comp... | |
| CVE-2026-98903 json | In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Add a channel shutdown field sashiko comp... | |
| CVE-2026-98902 json | In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm_seq comparison wrap-safe ... | |
| CVE-2026-98901 json | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not sk... | |
| CVE-2026-98900 json | In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gn... | |
| CVE-2026-98899 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly Wh... | |
| CVE-2026-98898 json | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/si: Don't schedule thermal work when queue is... | |
| CVE-2026-98897 json | In the Linux kernel, the following vulnerability has been resolved: ksmbd: don't hold ci->m_lock while waiting for a lease b... | |
| CVE-2026-98896 json | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while processing ... | |
| CVE-2026-98895 json | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table that has a miss t... | |
| CVE-2026-98894 json | In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: reset CPER ring on corrupt entry size When... | |
| CVE-2026-98893 json | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate SENSOR_UPDATE payload size ... | |
| CVE-2026-98892 json | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload si... | |
| CVE-2026-98891 json | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reas... | |
| CVE-2026-98890 json | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX frames In monit... | |
| CVE-2026-98889 json | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix sched scan IE sizing Scheduled ... | |
| CVE-2026-98888 json | In the Linux kernel, the following vulnerability has been resolved: arm64: kprobes: Allow reentering kprobes while single-st... | |
| CVE-2026-98887 json | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_IN... | |
| CVE-2026-98886 json | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: return errors from Oaktrail HDMI I2C reads ... | |
| CVE-2026-98885 json | In the Linux kernel, the following vulnerability has been resolved: ima: return error early if file xattr cannot be changed ... | |
| CVE-2026-98884 json | In the Linux kernel, the following vulnerability has been resolved: mmc: core: Add validation for host-provided max_segs Th... | |
| CVE-2026-98883 json | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: recognize UPIO_AU My MIPS Alchemy sy... | |
| CVE-2026-98882 json | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for dec_outp... | |
| CVE-2026-98881 json | In the Linux kernel, the following vulnerability has been resolved: net: bridge: remove stale rcu_barrier() in br_multicast_... | |
| CVE-2026-98880 json | In the Linux kernel, the following vulnerability has been resolved: ntfs3: handle set_blocksize failures ntfs3 uses buffer_... | |
| CVE-2026-98879 json | In the Linux kernel, the following vulnerability has been resolved: isofs: handle set_blocksize failures isofs uses buffer_... | |
| CVE-2026-98878 json | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Immediately exec priority drop following... | |
| CVE-2026-98877 json | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probe... | |
| CVE-2026-98876 json | In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardow... | |
| CVE-2026-98875 json | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The boote... | |
| CVE-2026-98874 json | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o net... | |
| CVE-2026-98873 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time ... | |
| CVE-2026-98872 json | In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG() on unknown typed-extent type vxfs... | |
| CVE-2026-98815 json | In the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko bot reported a potentia... | |
| CVE-2026-98784 json | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firm... | |
| CVE-2026-98755 json | In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vcc_send_ctl... | |
| CVE-2026-98754 json | In the Linux kernel, the following vulnerability has been resolved: tty: vcc: hold port lock when clearing tty pointer in vc... | |
| CVE-2026-98714 json | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update control fields on #VMEXIT if and only i... | |
| CVE-2026-98439 json | In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connectio... | |
| CVE-2023-7356 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BA... | |
| CVE-2026-98436 json | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device b... | |
| CVE-2026-98428 json | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire dri... | |
| CVE-2026-98389 json | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GPU res... | |
| CVE-2026-74860 json | A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a s... | |
| CVE-2026-66592 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtCamp Inc. rtMedia for... | |
| CVE-2026-116123 json | A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the function validatePassword of the file /... | |
| CVE-2026-116122 json | A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the compo... | |
| CVE-2026-116121 json | A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the file users.servic... | |
| CVE-2026-116120 json | A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllU... | |
| CVE-2026-116119 json | A vulnerability was found in NocoDB up to 2026.08.0. This affects an unknown part of the file packages/nocodb/src/services/us... | |
| CVE-2026-116118 json | A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the... | |
| CVE-2026-116117 json | A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability is the function run.halo.app.theme... | |
| CVE-2026-113345 json | Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Touris... | |
| CVE-2026-111497 json | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all p... | |
| CVE-2026-116116 json | A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Bo... | |
| CVE-2026-116115 json | A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file... | |
| CVE-2026-116114 json | A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of... | |
| CVE-2026-116113 json | A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/... |