Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-11), interpreter using the o…EPSS 0.3%Mar 6, 2026
- Critical9.5Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover.EPSS 0.4%Mar 5, 2026
- High7.8kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.EPSS 0.2%Mar 4, 2026
- Medium5.3A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38.Mar 3, 2026
- Medium5.5A flaw has been found in MaxSite CMS up to 109.1.KEVEPSS 2.5%Mar 1, 2026
- Low1.9A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1.EPSS 0.2%Feb 27, 2026
- Low1.9A vulnerability was found in libvips 8.19.0.EPSS 0.2%Feb 27, 2026
- Low1.9A vulnerability has been found in libvips 8.19.0.EPSS 0.2%Feb 27, 2026
- Low1.9A flaw has been found in libvips 8.19.0.EPSS 0.2%Feb 27, 2026
- Medium5.7SteVe is an open-source EV charging station management system.EPSS 0.3%Feb 26, 2026
- Medium6.3Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB State string parsing.Feb 26, 2026
- Medium6.3Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils.Feb 26, 2026
- High7.0An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: * gain access to possible…Feb 25, 2026
- High7.8TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Feb 20, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" This reverts commit…EPSS 0.3%Jan 13, 2026
- Low1.9A weakness has been identified in Open5GS up to 2.7.6.EPSS 0.2%Jan 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: Create card with device-managed snd_devm_card_new() snd_card_ymfpci_remove() was remo…EPSS 0.2%Dec 30, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init blk-iocost someti…EPSS 0.2%Dec 30, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With deferred close we can have closes that race with…EPSS 0.6%Dec 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: fix filter idr initialization The cited commit moved idr initialization too earl…EPSS 0.1%Dec 30, 2025
- High8.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix iso_conn related locking and validity issues sk->sk_state indicates whether iso…EPSS 0.3%Dec 30, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifs_construct_tcon() When having a multiuser mount with domain= sp…EPSS 0.2%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing [WHAT] IGT kms_cursor_legacy's long-nonblocking-modese…EPSS 0.2%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix race condition on death_list Rust Binder contains the following unsafe operation:…EPSS 0.2%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mm/mempool: fix poisoning order>0 pages with HIGHMEM The kernel test has reported: BUG: unable to h…EPSS 0.2%Dec 16, 2025