Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for theCheck if you run itEPSS 0.13%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts empty slots below n->pos in k, buCheck if you run itEPSS 0.13%Apr 13, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Add a check to ensure that does not overflow.Check if you run itEPSS 0.47%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE needsCheck if you run itEPSS 0.13%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl() Yiming Qian reported : I believe I found a locally triggerableCheck if you run itEPSS 0.12%Apr 13, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper Use expect->helper in ctnetlink and /proc to dump the helperCheck if you run itEPSS 0.58%Apr 13, 2026
- High7.1Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP.Check if you run itEPSS 0.49%Apr 13, 2026
- UnknownCVE-2025-62463 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsrisiko durch Denial-of-Service im DirectX-GrafikkernelCheck if you run itEPSS 0.49%Apr 13, 2026
- High8.5LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature.Check if you run itEPSS 7.66%Apr 13, 2026
- Medium4.6LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page.Check if you run itEPSS 0.23%Apr 13, 2026
- Medium5.1A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2.Check if you run itEPSS 0.27%Apr 13, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Apache Storm.Check if you run itEPSS 1.03%Apr 13, 2026
- Medium5.4Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolateCheck if you run itEPSS 0.47%Apr 13, 2026
- Critical9.3A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.0a1) through 1.28.1 (and 2.0.0a2) on Python (OSS), Cloud RunCheck if you run itEPSS 2.20%Apr 13, 2026
- UnknownCVE-2025-62567 - Security Update Guide - Microsoft - Windows Hyper-V Denial of Service VulnerabilityCheck if you run itEPSS 1.10%Apr 13, 2026
- UnknownCVE-2025-62474 - Security Update Guide - Microsoft - Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.39%Apr 13, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.Check if you run itEPSS 0.15%Apr 13, 2026
- Low2.0A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to exeCheck if you run itEPSS 0.18%Apr 13, 2026
- High7.2An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthentiCheck if you run itEPSS 0.24%Apr 13, 2026
- Critical9.8An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations.Check if you run itEPSS 0.20%Apr 13, 2026
- Critical9.1Solstice::Session versions through 1440 for Perl generates session ids insecurely.Check if you run itEPSS 0.34%Apr 13, 2026
- High7.5The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisitCheck if you run itEPSS 0.20%Apr 13, 2026
- High8.7A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115.Check if you run itEPSS 0.58%Apr 13, 2026
- Medium5.5A weakness has been identified in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.26%Apr 13, 2026
- Medium6.9A vulnerability was detected in code-projects Faculty Management System 1.0.Check if you run itEPSS 0.26%Apr 13, 2026
Sort