Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD.Check if you run itEPSS 0.54%Aug 21, 2026
- High7.1Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents.Check if you run itEPSS 0.40%Aug 21, 2026
- Critical9.4DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption.Check if you run itEPSS 0.09%Aug 21, 2026
- Critical9.3Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header.Check if you run itEPSS 0.61%Aug 21, 2026
- High7.8Vim is an open source, command line text editor.Check if you run itEPSS 0.15%Aug 18, 2026
- Unknown[20260808] - Core - Improper ACL checks for batch copy actionsCheck if you run itEPSS 0.29%Aug 17, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds u32_change() copies the user-p…Check if you run itEPSS 0.17%Aug 15, 2026
- High8.8Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rspCheck if you run itEPSS 0.26%Aug 15, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Reject the EXT4_IOC_MOVE_EXT ioctl…Check if you run itEPSS 0.21%Aug 15, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe to call _ntfs_bad_inode on live…Check if you run itEPSS 0.65%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse clean…Check if you run itEPSS 0.17%Aug 15, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: avoid untracked enable work lowpan_enable_set() allocates a temporary work item…Check if you run itEPSS 0.21%Aug 15, 2026
- High7.8ocfs2: avoid moving extents to occupied clustersCheck if you run itEPSS 0.17%Aug 15, 2026
- UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsCheck if you run itEPSS 0.57%Aug 13, 2026
- UnknownAvoid quadratic complexity in resolvePath in net/urlCheck if you run itEPSS 0.55%Aug 13, 2026
- High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityPatch nowKEVEPSS 71.66%Aug 13, 2026
- Unknownmilvus milvus Missing Authentication for Critical FunctionPatch nowKEVEPSS 4.56%Aug 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and…Check if you run itEPSS 0.17%Aug 10, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesOpen the advisoryAug 7, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 27.86%Aug 3, 2026
- High7.8posix-cpu-timers: Prevent UAF caused by non-leader exec() raceCheck if you run itEPSS 0.65%Jul 29, 2026
- Critical9.8JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 89.57%Jul 27, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a…Check if you run itEPSS 0.15%Jul 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 ("erofs: use meta buffers…Check if you run itEPSS 0.13%Jul 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netli…Check if you run itEPSS 0.13%Jul 19, 2026