Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound connections ksmbd_all_conn_set_status() treats every co…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier *_change…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: fuse: Fix the condition to enable over-io-uring The existing condition in fuse_uring_cmd() is there…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Since commit b66774b48dd9 ("Bluetooth:…Check if you run itEPSS 0.18%Sep 17, 2026
- High8.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs.Check if you run itEPSS 0.35%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hci_conn when a second LE connect is rejected create_le_conn_complete() d…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size mana_gd_query_max_resources() sizes gc-…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() rvu_mbox_init() is called sepa…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownOAuth2 sign-in attached to an existing account without an email comparison in AshAuthenticationCheck if you run itEPSS 0.75%Sep 17, 2026
- UnknownRevoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication PhoenixCheck if you run itEPSS 0.91%Sep 17, 2026
- High7.1A flaw was found in Redis community.Check if you run itEPSS 0.40%Sep 17, 2026
- High7.8A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true.Check if you run itEPSS 0.24%Sep 17, 2026
- High7.1The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unau…Check if you run itEPSS 0.16%Sep 17, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.98%Sep 17, 2026
- Critical9.3Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation.Check if you run itEPSS 0.44%Sep 16, 2026
- Critical9.8LMDeploy is a toolkit for compressing, deploying, and serving large language models.Check if you run itEPSS 0.80%Sep 16, 2026
- Critical9.1Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.Check if you run itEPSS 0.48%Sep 16, 2026
- UnknownCisco Identity Services Engine Cross-Site Scripting VulnerabilityCheck if you run itEPSS 0.19%Sep 16, 2026
- Medium4.9ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure VulnerabilityCheck if you run itEPSS 0.29%Sep 16, 2026
- High8.8Backstage is an open framework for building developer portals.Check if you run itEPSS 1.18%Sep 16, 2026
- Medium4.4Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability.Check if you run itEPSS 0.11%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmem_invalida…Check if you run itEPSS 0.21%Sep 16, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate MSI data before routing it to EIOINTC pch_msi_set_irq() passes e->msi.data…Check if you run itEPSS 0.17%Sep 16, 2026