Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Highsharp : Vulnerability in librsvg dependency CVE-2026-96889Check if you run itEPSS 0.13%Oct 6, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)Open the advisoryOct 6, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)Open the advisoryOct 6, 2026
- High7.0Out of Bound Write on WibuKey for WindowsCheck if you run itEPSS 0.10%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrm_state_netlink() builds the ALLOCSPI response with dump_oneCheck if you run itEPSS 0.17%Oct 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept We need to clear cep before releaseCheck if you run itEPSS 0.13%Oct 6, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intentionally returns a referCheck if you run itEPSS 0.12%Oct 6, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association responses libipw_handle_assoc_resp() reads the capability, status andCheck if you run itEPSS 0.26%Oct 6, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw_process_probe_response() and the libipw_networkCheck if you run itEPSS 0.26%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: fix UAF in brcms_free_timer() brcms_free_timer() calls brcms_del_timer() which uses the non-syncCheck if you run itEPSS 0.18%Oct 6, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)Open the advisoryOct 6, 2026
- High7.8xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()Check if you run itEPSS 0.15%Oct 6, 2026
- High7.0RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeedsCheck if you run itEPSS 0.13%Oct 6, 2026
- UnknownRDMA/mad: Fix receive buffer leak when PKey enforcement failsCheck if you run itEPSS 0.17%Oct 6, 2026
- Unknownpppoatm: ensure a writable skb header and linear dataCheck if you run itEPSS 0.18%Oct 6, 2026
- High7.8exec: Cleanup POSIX timers right after de_thread()Check if you run itEPSS 0.13%Oct 6, 2026
- Unknownscsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()Check if you run itEPSS 0.18%Oct 6, 2026
- Unknownwifi: iwlegacy: fix broadcast stations deallocationCheck if you run itEPSS 0.18%Oct 6, 2026
- High7.8drm/ttm: fix swapped-out resources never leaving their bulk_move rangeCheck if you run itEPSS 0.15%Oct 6, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)Open the advisoryOct 6, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.41%Oct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.40%Oct 6, 2026
- UnknownImportant: nodejs:22 security updateOpen the advisoryOct 6, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionCheck if you run itEPSS 0.13%Oct 5, 2026