Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.37%Aug 27, 2026
- High8.5OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it.Check if you run itEPSS 0.55%Aug 26, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrb_msg_to_type6cprb_msgx() function…Check if you run itEPSS 0.19%Aug 26, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcrypt_msgtype6_send_ep11_cpr…Check if you run itEPSS 0.18%Aug 26, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrb_msg_to_type6cprb_m…Check if you run itEPSS 0.21%Aug 26, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost->eh_noresume is currently consulted twice in one e…Check if you run itEPSS 0.21%Aug 26, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the exis…Check if you run itEPSS 0.61%Aug 26, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers…Check if you run itEPSS 0.45%Aug 26, 2026
- High8.4xfs: bounds-check buffer log item's dirty bitmapCheck if you run itEPSS 0.14%Aug 26, 2026
- High7.8af_unix: Unlink scc_entry in unix_del_edge().Check if you run itEPSS 0.17%Aug 26, 2026
- Critical9.8macvlan: inherit needed_headroom and needed_tailroom from lowerdevCheck if you run itEPSS 0.54%Aug 26, 2026
- Medium6.9code-projects Simple Inventory System edit.php sql injectionOpen the advisoryAug 25, 2026
- Medium5.3Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fixCheck if you run itEPSS 0.34%Aug 25, 2026
- UnknownHeap-buffer-overflow in lua_errorOpen the advisoryAug 25, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.97%Aug 25, 2026
- UnknownWeak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 8.96%Aug 25, 2026
- UnknownRed Hat build_of_keycloak Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 6.41%Aug 25, 2026
- Medium6.0A flaw was found in CRI-O's container-creation environment-variable handling ( in , consumed by in ).Check if you run itEPSS 0.11%Aug 24, 2026
- High8.6Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function.Check if you run itEPSS 1.78%Aug 24, 2026
- Critical9.3rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrato…Check if you run itEPSS 0.77%Aug 24, 2026
- High7.1rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames contain…Check if you run itEPSS 0.72%Aug 24, 2026
- UnknownMalicious code in babel-polyfill-plugin-corejs2 (npm)Open the advisoryAug 24, 2026
- High7.7A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends.Check if you run itEPSS 0.56%Aug 24, 2026
- High7.2A path traversal vulnerability was found in AWX's project archive extraction.Check if you run itEPSS 1.72%Aug 24, 2026
- High8.8RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view.Check if you run itEPSS 0.44%Aug 24, 2026
Sort