Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8LMDeploy is a toolkit for compressing, deploying, and serving large language models.Check if you run itEPSS 0.69%Sep 18, 2026
- UnknownMalicious code in tailwindcss-form (npm)Open the advisorySep 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent memory cache_pos_decode(), cache_key_decode() and…Check if you run itEPSS 0.17%Sep 17, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in esp_ssg_unref() esp_ssg_unref() releases the page reference…Check if you run itEPSS 0.17%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: clear stale link state on full reset After a full chip reset, mac80211 reconfig…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: safely discard unregistered deferred locks When vfs_lock_file() defers a lock, smb2_lock() p…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Sep 15, 2026
- Medium6.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.19%Sep 14, 2026
- Critical9.8Cisco Secure Email Gateway SQL Injection VulnerabilityPatch nowKEVEPSS 29.54%Sep 14, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writeback_store() Patch series "zram: fix stale scan bounds after…Check if you run itEPSS 0.17%Sep 11, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates mdsc->sess…Check if you run itEPSS 0.65%Sep 11, 2026
- High8.2nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATECheck if you run itEPSS 0.62%Sep 11, 2026
- Medium5.5kernel: RDMA/rxe: Fix incomplete state save in rxe_requesterCheck if you run itEPSS 0.16%Sep 11, 2026
- High7.3Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.Check if you run itEPSS 0.11%Sep 11, 2026
- UnknownCVE-2026-78379 - Consent bypass in Strands Agents Tools python_repl toolCheck if you run itEPSS 0.57%Sep 9, 2026
- Unknownzstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to beCheck if you run itEPSS 0.20%Sep 9, 2026
- Medium5.1A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.Check if you run itEPSS 0.14%Sep 8, 2026
- High7.5Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0Check if you run itEPSS 0.17%Sep 8, 2026
- High8.8Google Chromium V8 Out of Bounds Write VulnerabilityPatch nowKEVEPSS 3.14%Sep 8, 2026
- Critical9.8A flaw was found in FreeIPA.Check if you run itEPSS 1.21%Sep 7, 2026
- Medium5.3MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts.Check if you run itEPSS 0.34%Sep 3, 2026
- High8.7MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, allowing attackers to exhaust memory by supplying…Check if you run itEPSS 0.92%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges.Check if you run itEPSS 0.81%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>.Check if you run itEPSS 0.66%Sep 3, 2026