Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: renesas_usb3: validate endpoint index in standard request handlers The GET_STATUS and…Check if you run itEPSS 0.17%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNameLength from the cli…Check if you run itEPSS 0.58%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Handle invalid large leaf mappings correctly It has been possible for a long time to mar…Check if you run itEPSS 0.40%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup Disable the delayed work…Check if you run itEPSS 0.16%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown epf_ntb_epc_destroy() duplicates th…Check if you run itEPSS 0.16%Apr 24, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use scratch field in MMIO fragment to hold small write values When exiting to userspace t…Check if you run itEPSS 0.19%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Fix kernel panic due to __initconst misuse Fix a kernel panic when probing the…Check if you run itEPSS 0.16%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915: Unlink NV12 planes earlier unlink_nv12_plane() will clobber parts of the plane state pote…Check if you run itEPSS 0.16%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control timeout The bcm2835_asb_control() function uses…Check if you run itEPSS 0.16%Apr 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down When the nl80211 socket that origina…Check if you run itEPSS 0.18%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix NULL dereference on notify error path Since commit b5daf93b809d1 ("firmware…Check if you run itEPSS 0.16%Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch p…Check if you run itEPSS 0.65%Apr 24, 2026
- Medium4.3The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow user with…Check if you run itEPSS 0.57%Apr 24, 2026
- Low2.4AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms.Check if you run itEPSS 0.69%Apr 24, 2026
- Medium6.3Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.Check if you run itEPSS 0.54%Apr 24, 2026
- High8.5A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending ProvideSignalRequest.Check if you run itEPSS 0.35%Apr 24, 2026
- Medium4.3The Taqnix plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.21%Apr 24, 2026
- Medium5.3The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0.Check if you run itEPSS 0.42%Apr 24, 2026
- Critical9.8Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service.Check if you run itEPSS 0.61%Apr 24, 2026
- Critical9.1Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.57%Apr 24, 2026
- Medium6.1FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.23%Apr 24, 2026
- High7.1Kirby is an open-source content management system.Check if you run itEPSS 0.51%Apr 24, 2026
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.48%Apr 24, 2026
- Medium6.1melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.18%Apr 24, 2026
- High8.4A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections.Check if you run itEPSS 0.25%Apr 24, 2026