Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio.Check if you run itEPSS 0.63%Aug 24, 2026
- Medium6.9BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC…Check if you run itEPSS 0.41%Aug 24, 2026
- Low2.1A security vulnerability has been detected in Open5GS 2.8.0.Check if you run itEPSS 0.56%Aug 24, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.37%Aug 24, 2026
- Low3.7Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey.Check if you run itEPSS 0.41%Aug 23, 2026
- Medium5.3Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line.Check if you run itEPSS 0.42%Aug 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: sched_ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fai…Check if you run itEPSS 0.17%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b_addr in xfs_buf_free When xfs_buf_alloc_backing_mem() fails, xfs_buf_free() is c…Check if you run itEPSS 0.21%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from by_id ovpn_nl_peer_set_doit() resolves the target…Check if you run itEPSS 0.65%Aug 22, 2026
- High7.3In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor bond_alb_monitor() reads p…Check if you run itEPSS 0.13%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers [BUG] For a crafted btrfs image, the follow…Check if you run itEPSS 0.67%Aug 22, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, return NULL on create error Tracer creation can fail by returning either NULL or ERR_PTR.Check if you run itEPSS 0.50%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF conntrack kfunc…Check if you run itEPSS 0.18%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() reqsk_queue_hash_req() publishes a…Check if you run itEPSS 0.13%Aug 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: vhost_iotlb: bound map allocation in add_range vhost_iotlb_add_range_ctx() only retires an old entr…Check if you run itEPSS 0.14%Aug 22, 2026
- High8.4In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusion in notification logic Sashiko reports: At the start of the loop i…Check if you run itEPSS 0.20%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of s…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obta…Check if you run itEPSS 0.18%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxr_dev fails during aux…Check if you run itEPSS 0.20%Aug 22, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter The sch_cake ACK filter pa…Check if you run itEPSS 0.44%Aug 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protect…Check if you run itEPSS 0.18%Aug 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost_scsi_setup_vq_cmds() runs from VHOST_SCSI_S…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Another challenge w…Check if you run itEPSS 0.13%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() The q->replay_state is blindly overwr…Check if you run itEPSS 0.20%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length ncsi_send_cmd_nl() takes the number…Check if you run itEPSS 0.18%Aug 22, 2026
Sort