Search

ID	Vulnerability	Rated since	Published
CVE-2026-112946 low	vite: Vite: Information disclosure via improper module path handling	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-112941 low	filelock: filelock: Unauthorized file write via lock directory replacement	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-112912 low	filelock: filelock: Information disclosure via symbolic link following in SoftFileLock	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-88041 low	tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanup	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-80353 low	tomcat: tomcat: Unauthorized socket access via TOCTOU race condition	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-74049 low	tomcat: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-74048 low	tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-110725 low	fast-uri: fast-uri: Cross-site scripting via unescaped colon in relative URI paths	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-110095 low	fast-uri: fast-uri: Path traversal via improper relative URI normalization	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-111766 low	markdown-it: markdown-it: Denial of Service via repeated unterminated inline HTML constructs	since at least 24 Oct 202607:11 UTC build	19 Oct 2026
CVE-2026-111063 low	aiohttp: aiohttp: Information disclosure via unenforced Secure attribute on shared cookies	since at least 24 Oct 202607:11 UTC build	19 Oct 2026
CVE-2026-112310 low	docling-core: docling-core: information disclosure via plain filesystem paths in image references	since at least 24 Oct 202607:11 UTC build	19 Oct 2026
CVE-2026-112026 low	cms: light0011 cms: Information disclosure via weak password hashing	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98860 low	kernel: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98851 low	kernel: netfilter: nft_flow_offload: drop flowtable reference on init error path	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98831 low	kernel: of/overlay: don't leak fragment references when changeset init fails	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98817 low	In the Linux kernel, the following vulnerability has been resolved: A ...	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98784 low	kernel: drm/amdgpu/gfx6: fix firmware leak on teardown	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98782 low	kernel: drm/mediatek: Fix ovl adaptor platform device leak	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98781 low	kernel: drm/mediatek: Fix pdev reference leak in mtk_drm_bind()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98780 low	kernel: drm/amdgpu: fix IP instance memory leak on kobject add failure	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98779 low	kernel: drm/amdgpu: fix ACP MFD device leak on init failure	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98771 low	kernel: usb: storage: sierra_ms: reject short SWoC info transfers	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98755 low	kernel: tty: vcc: zero-initialize control packet in vcc_send_ctl()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98746 low	kernel: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98732 low	kernel: Bluetooth: btintel: fix buffer over-read in btintel_hw_error()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98728 low	kernel: tpm: fix off-by-four bounds check in tpm2_get_random()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98710 low	kernel: wifi: iwlegacy: 3945: free EEPROM data on remove	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98697 low	kernel: USB: serial: fix dynamic id driver deregistration race	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98692 low	kernel: thunderbolt: Make the DP tunnel activation callback mandatory	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98690 low	kernel: thunderbolt: Fix domain reference leak when DPRX read is canceled	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98686 low	kernel: smb: client: discard post-EOF pagecache when extending a file via zero range	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98685 low	kernel: smb: client: discard post-EOF pagecache when extending a file via clone range	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98684 low	kernel: smb: client: flush and commit data before querying allocated ranges	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98683 low	kernel: smb: client: flush dirty data before zeroing a range	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98682 low	kernel: smb: client: drain and invalidate before server-side copy/clone	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98680 low	kernel: iio: accel: kionix-kx022a: Prevent memory leak and fix state	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98679 low	kernel: iio: accel: kxcjk-1013: reject duplicate event disable	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98675 low	kernel: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98671 low	kernel: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98668 low	kernel: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98661 low	kernel: iio: light: rohm-bu27034: Fix infinite delay on error	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98659 low	kernel: iio: pressure: rohm-bm1390: Return error when read fails	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98655 low	kernel: perf: Require kernel access for text poke events	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98633 low	kernel: Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98609 low	kernel: drm/virtio: fix object leak when drm_gem_handle_create() fails	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98608 low	kernel: drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98607 low	kernel: drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98604 low	kernel: ovpn: replace bind when learning local endpoint	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-98603 low	kernel: kernel: Denial of service via race condition in ovpn	since at least 24 Oct 202607:11 UTC build	18 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.