Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under mutex arp/ip(6)t_register_table() add the table…Check if you run itEPSS 0.12%Jul 19, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file,…Check if you run itEPSS 0.12%Jul 19, 2026
- Unknownblock: Avoid mounting the bdev pseudo-filesystem in userspaceCheck if you run itEPSS 0.21%Jul 19, 2026
- Critical9.3Sangoma Switchvox SQL Injection VulnerabilityPatch nowKEVEPSS 18.98%Jul 17, 2026
- High7.8Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated…Check if you run itEPSS 0.15%Jul 12, 2026
- UnknownCacti Cacti Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 88.79%Jul 6, 2026
- Medium5.3Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which…Check if you run itEPSS 0.40%Jul 5, 2026
- UnknownFlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 4.36%Jul 3, 2026
- UnknownIvanti automation SQL Injection: HibernatePatch nowKEVEPSS 0.90%Jul 2, 2026
- High8.1The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of eac…Check if you run itEPSS 0.42%Jun 30, 2026
- High8.8Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 1.01%Jun 30, 2026
- UnknownApache CouchDB Improper Input ValidationPatch nowKEVEPSS 12.16%Jun 30, 2026
- Medium6.8The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined…Check if you run itEPSS 0.33%Jun 29, 2026
- Medium5.3The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_ncm_send().Check if you run itEPSS 0.20%Jun 29, 2026
- UnknownGogs Gogs Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.93%Jun 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de ("dm cache policy s…Check if you run itEPSS 0.12%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_destroy() calls metadata…Check if you run itEPSS 0.19%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operations FUSE_NOTIFY_STORE and FUSE_N…Check if you run itEPSS 0.13%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev close This addresses a use-after-free bug when a raw bundl…Check if you run itEPSS 0.17%Jun 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by incorrect use of nat_entry flag Data loss can occur when fsync is per…Check if you run itEPSS 0.16%Jun 24, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ice: fix race condition in TX timestamp ring cleanup Fix a race condition between ice_free_tx_tstam…Check if you run itEPSS 0.11%Jun 24, 2026
- Medium5.5The Zephyr ext2 filesystem driver (subsys/fs/ext2) trusted the on-disk directory entry fields de_rec_len and de_name_len when walking a directory block.Check if you run itEPSS 0.16%Jun 23, 2026
- High7.0util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.11%Jun 17, 2026
- UnknownD-Link dir-868l_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 11.93%Jun 17, 2026
- Low3.7In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface back out of the packet via net_pkt_iface(pkt) after the packet had…Check if you run itEPSS 0.31%Jun 16, 2026