Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We found an infinite loop bug in the…Check if you run itEPSS 0.13%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infinite loop bug in…Check if you run itEPSS 0.13%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata We found an infinite…Check if you run itEPSS 0.13%Mar 18, 2026
- High7.2A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that resul…Check if you run itEPSS 1.04%Mar 18, 2026
- Critical9.1Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.32%Mar 18, 2026
- Critical9.1IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the inte…Check if you run itEPSS 0.19%Mar 17, 2026
- High7.8Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configu…Check if you run itEPSS 0.47%Mar 17, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missin…Check if you run itEPSS 0.13%Mar 17, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class fchmodat2(), introduced in version 6.6 is current…Check if you run itEPSS 0.13%Mar 17, 2026
- Medium5.5A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.Check if you run itEPSS 0.19%Mar 16, 2026
- Medium6.8PX4 autopilot is a flight control solution for drones.Check if you run itEPSS 0.34%Mar 16, 2026
- Unknownlinux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-Open the advisoryMar 16, 2026
- High7.6Dagu is a workflow engine with a built-in Web user interface.Check if you run itEPSS 0.50%Mar 13, 2026
- High7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveCheck if you run itEPSS 0.70%Mar 13, 2026
- High8.2Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.Check if you run itEPSS 1.30%Mar 12, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.43%Mar 12, 2026
- Low1.7Backstage is an open framework for building developer portals.Check if you run itEPSS 0.49%Mar 12, 2026
- Medium4.7Backstage is an open framework for building developer portals.Check if you run itEPSS 0.24%Mar 12, 2026
- Medium4.8Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF.Check if you run itEPSS 0.15%Mar 12, 2026
- Critical9.3Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module.Check if you run itEPSS 0.98%Mar 10, 2026
- High8.1External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.30%Mar 10, 2026
- High7.8A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and un…Check if you run itEPSS 0.24%Mar 10, 2026
- High7.8Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.40%Mar 10, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit.Check if you run itEPSS 0.51%Mar 10, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: espintcp: Fix race condition in espintcp_close() This issue was discovered during a code audit.Check if you run itEPSS 0.10%Mar 10, 2026