Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
54704
Total
4321
Critical
16261
High
15994
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-57175 | MEDIUM | 6.4 | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without … | Sep 24, 2026 |
| CVE-2026-54461 | MEDIUM | 6.5 | Habitica is a habit tracker application that treats goals like a role-playing game. From 4.172.1 until 5.48.2, a query parameter on Habitica's /api/v3/groups/:groupId/members route is … | Sep 24, 2026 |
| CVE-2026-97521 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2_quota_init() checks for duplicate quota_change IDs while holding qd_lock … | Sep 24, 2026 |
| CVE-2026-97520 | HIGH | 7.1 | In the Linux kernel, the following vulnerability has been resolved: gfs2: move quota_init qc iterator increment Move qc++ from the loop body into the for-loop … | Sep 24, 2026 |
| CVE-2026-97519 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix null pointer dereference in devcoredump cleanup In xe_devcoredump_snapshot_free(), ss->gt may be NULL when … | Sep 24, 2026 |
| CVE-2026-97518 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject duplicate wiphy cipher suite entries Duplicate entries in wiphy->cipher_suites do not describe … | Sep 24, 2026 |
| CVE-2026-97517 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs … | Sep 24, 2026 |
| CVE-2026-97516 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() It was recently reported that rtw_fw_adaptivity_result() … | Sep 24, 2026 |
| CVE-2026-97515 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a … | Sep 24, 2026 |
| CVE-2026-97514 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handle_dynamic_resolution change requires that the state_lock … | Sep 24, 2026 |
| CVE-2026-97513 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2m_ctx after Instance Removed from List Possible use after free if … | Sep 24, 2026 |
| CVE-2026-97512 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete … | Sep 24, 2026 |
| CVE-2026-97511 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds access in monitor In NAN, we don't know on what band … | Sep 24, 2026 |
| CVE-2026-97510 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() If tb_cfg_request() fails setting up the request … | Sep 24, 2026 |
| CVE-2026-97509 | HIGH | 8.8 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we … | Sep 24, 2026 |
| CVE-2026-97508 | HIGH | 7.5 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we do with the … | Sep 24, 2026 |
| CVE-2026-97507 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dma_alloc_coherent The return value of dm1105_dma_map(), which handles … | Sep 24, 2026 |
| CVE-2026-97506 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainup_buffers() builds a linked list … | Sep 24, 2026 |
| CVE-2026-97505 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() Currently, the __resource_resize_store() allows writing to the resourceN_resize sysfs … | Sep 24, 2026 |
| CVE-2026-97504 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk Review by sashiko.dev highlighted potential use after … | Sep 24, 2026 |
| CVE-2026-97503 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq/<n>/ directory names are built in … | Sep 24, 2026 |
| CVE-2026-97502 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: avoid NULL deref of host->data in IRQ handler mmc_davinci_irq() returns early only when … | Sep 24, 2026 |
| CVE-2026-97501 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction pinctrl_gpio_direction_input() / pinctrl_gpio_direction_output() take … | Sep 24, 2026 |
| CVE-2026-97500 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status … | Sep 24, 2026 |
| CVE-2026-97499 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the … | Sep 24, 2026 |