CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-82364 json | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /orde... | |
| CVE-2026-80725 json | In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria... | |
| CVE-2026-80724 json | In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming w... | |
| CVE-2026-80723 json | In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic regi... | |
| CVE-2026-80722 json | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before dr... | |
| CVE-2026-80721 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in is... | |
| CVE-2026-80720 json | In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend iom... | |
| CVE-2026-80718 json | In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu... | |
| CVE-2026-80717 json | In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length T... | |
| CVE-2026-80716 json | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink snd_pcm_... | |
| CVE-2026-80714 json | In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns ... | |
| CVE-2026-80713 json | In the Linux kernel, the following vulnerability has been resolved: io_uring: preserve task restrictions across exec Per-ta... | |
| CVE-2026-80712 json | In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before exec... | |
| CVE-2026-80710 json | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmt_buffe... | |
| CVE-2026-80709 json | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP... | |
| CVE-2026-80707 json | In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): initia... | |
| CVE-2026-80706 json | In the Linux kernel, the following vulnerability has been resolved: can: softing: fw_parse(): validate firmware record spans... | |
| CVE-2026-80702 json | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as... | |
| CVE-2026-80700 json | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both st... | |
| CVE-2026-80696 json | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Fix reading the minimum alarm voltage ... | |
| CVE-2026-80694 json | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_r... | |
| CVE-2026-80693 json | In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the alloca... | |
| CVE-2026-80692 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_acl/le_syn... | |
| CVE-2026-80691 json | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PR... | |
| CVE-2026-80685 json | In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read __page_2 for order-1 folios in snaps... | |
| CVE-2026-80684 json | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation ... | |
| CVE-2026-80683 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own sco_conn referen... | |
| CVE-2026-80682 json | In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmap_start_pfn ... | |
| CVE-2026-80681 json | In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after route_shortcircuit() B... | |
| CVE-2026-80680 json | In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure... | |
| CVE-2026-80678 json | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling... | |
| CVE-2026-80677 json | In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev->driver in dev_has_... | |
| CVE-2026-80675 json | In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed... | |
| CVE-2026-80674 json | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident attribute lists and harden the v... | |
| CVE-2026-80673 json | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs_... | |
| CVE-2026-80672 json | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check n... | |
| CVE-2026-80671 json | In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy, and BUG... | |
| CVE-2026-80670 json | In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topology() in machine_... | |
| CVE-2026-80668 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use conntrack GC to reap... | |
| CVE-2026-80665 json | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't... | |
| CVE-2026-80664 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target families x... | |
| CVE-2026-80663 json | In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfil... | |
| CVE-2026-80662 json | In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size... | |
| CVE-2026-80661 json | In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TP_pr... | |
| CVE-2026-80656 json | In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot ... | |
| CVE-2026-80653 json | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add slave_destroy interface for v3 hw W... | |
| CVE-2026-80649 json | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() sc... | |
| CVE-2026-80646 json | In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_sta... | |
| CVE-2026-80645 json | In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721_db_d... | |
| CVE-2026-80638 json | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_... | |
| CVE-2026-80637 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in time... | |
| CVE-2026-80635 json | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmwa... | |
| CVE-2026-80634 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num_encaps underflow on brid... | |
| CVE-2026-80633 json | In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dma_resv lock before dma_buf_unpin() in re... | |
| CVE-2026-80631 json | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the... | |
| CVE-2026-80630 json | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_b... | |
| CVE-2026-80628 json | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q->lock... | |
| CVE-2026-80622 json | In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclk_cleanup() This... | |
| CVE-2026-80619 json | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aa_replace_profiles The ... | |
| CVE-2026-80617 json | In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size foe_che... | |
| CVE-2026-80615 json | In the Linux kernel, the following vulnerability has been resolved: net: dst_metadata: fix false-positive memcpy overflow in... | |
| CVE-2026-80614 json | In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emac_probe M... | |
| CVE-2026-80613 json | In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP... | |
| CVE-2026-80612 json | In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsulatio... | |
| CVE-2026-80609 json | In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[] Move ... | |
| CVE-2026-80608 json | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during dev... | |
| CVE-2026-80606 json | In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifier_lock for write on inject t... | |
| CVE-2026-80604 json | In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for numbered r... | |
| CVE-2026-80603 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one ... | |
| CVE-2026-80601 json | In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb r... | |
| CVE-2026-80600 json | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb re... | |
| CVE-2026-80599 json | In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto field ... | |
| CVE-2026-80598 json | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decomp... | |
| CVE-2026-80596 json | In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control... | |
| CVE-2026-80593 json | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessi... | |
| CVE-2026-80591 json | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries ... | |
| CVE-2026-80590 json | In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reass... | |
| CVE-2026-81346 json | The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actio... | |
| CVE-2026-81342 json | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during u... | |
| CVE-2026-81200 json | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information,... | |
| CVE-2026-81026 json | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status... | |
| CVE-2026-80488 json | The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before ... | |
| CVE-2026-80311 json | The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the cus... | |
| CVE-2026-77786 json | The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the cap... | |
| CVE-2026-77704 json | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required... | |
| CVE-2026-77012 json | The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its ... | |
| CVE-2026-77010 json | The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks o... | |
| CVE-2026-77008 json | The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or auth... | |
| CVE-2026-77007 json | The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation chec... | |
| CVE-2026-76586 json | The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount actua... | |
| CVE-2026-76548 json | The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, grantin... | |
| CVE-2026-76547 json | The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing ... | |
| CVE-2026-76546 json | The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowin... | |
| CVE-2026-19430 json | The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the tok... | |
| CVE-2026-18234 json | The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs... | |
| CVE-2026-18233 json | The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belon... | |
| CVE-2026-17522 json | The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings s... | |
| CVE-2026-17520 json | The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving it fr... | |
| CVE-2026-16947 json | The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before... | |
| CVE-2026-16600 json | The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does not v... |