Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintains a global list, xtensa_domain_list, of active…Check if you run itEPSS 0.16%Jun 16, 2026
- Medium5.3Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which cache…Check if you run itEPSS 0.27%Jun 15, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityPatch nowKEVEPSS 28.17%Jun 15, 2026
- Critical9.8Splunk Enterprise Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.94%Jun 10, 2026
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 2.44%Jun 8, 2026
- Medium5.3Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.3Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSuppo…Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.1An authenticated user can persist arbitrary HTML/JavaScript in the email_id or mobile_no fields of a Customer record and trigger unescaped rendering in the Point of Sa…Check if you run itEPSS 0.41%Jun 3, 2026
- Medium4.8An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and tri…Check if you run itEPSS 0.44%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("A…Check if you run itEPSS 0.13%Jun 3, 2026
- High7.8OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Check if you run itEPSS 0.21%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Recover from panthor_gpu_flush_caches() failures We have seen a few cases where the wh…Check if you run itEPSS 0.15%Jun 3, 2026
- High8.6Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.20%Jun 3, 2026
- Critical9.1alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups.Check if you run itEPSS 0.42%Jun 2, 2026
- High7.1LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.34%Jun 2, 2026
- Medium4.6Out of bounds write in openSeaChest’s Trim/Unmap operation in Seagate’s openSeaChest v26.03.0 on all supported platforms allows for writing extra memory describing a r…Check if you run itEPSS 0.11%Jun 2, 2026
- Medium6.3Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause a denial of service by sendin…Check if you run itEPSS 0.24%Jun 2, 2026
- Medium6.3CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in nest/a-path.c.Check if you run itEPSS 0.40%Jun 2, 2026
- Critical9.2Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .…Check if you run itEPSS 0.66%Jun 2, 2026
- High7.5OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.Check if you run itEPSS 0.63%Jun 2, 2026
- High8.5Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bios_handlers.c.Check if you run itEPSS 0.12%Jun 2, 2026
- Medium4.3An improper authorization vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.45%Jun 2, 2026
- Critical9.8Langroid is a framework for building large-language-model-powered applications.Check if you run itEPSS 0.69%Jun 1, 2026
- High7.8Memory corruption while processing multiple IOCTL command for escape operations.Check if you run itEPSS 0.07%Jun 1, 2026
- High7.8Memory corruption while processing IOCTL calls for escape operations.Check if you run itEPSS 0.07%Jun 1, 2026