Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions The BPF verifier and the dynptr abstract…Check if you run itEPSS 0.13%Aug 22, 2026
- High8.4In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-after-free in send verdict sk_psock_msg_verdict() takes a socket ref…Check if you run itEPSS 0.14%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip_last_asconf caches the outstanding outbound A…Check if you run itEPSS 0.50%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sctp_process_asconf_param() stores a newly added pee…Check if you run itEPSS 0.50%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw->ports tb_drom_parse_entry_por…Check if you run itEPSS 0.18%Aug 22, 2026
- High8.4net: smc: fix splice entry lifetime imbalance in smc_rx_spliceCheck if you run itEPSS 0.14%Aug 22, 2026
- Critical9.8sctp: keep chunk->transport in step with the list it is queued onCheck if you run itEPSS 0.50%Aug 22, 2026
- Medium6.6Duplicate Advisory: SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted pluginOpen the advisoryAug 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing to userspace bnxt_re_alloc_ucontext() allocates uctx…Check if you run itEPSS 0.18%Aug 22, 2026
- High8.6NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus root.Check if you run itEPSS 0.20%Aug 22, 2026
- Medium6.9hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c.Check if you run itEPSS 0.21%Aug 22, 2026
- Medium6.9hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length.Check if you run itEPSS 0.17%Aug 22, 2026
- High8.5hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path.Check if you run itEPSS 0.24%Aug 22, 2026
- High8.7NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying…Check if you run itEPSS 0.52%Aug 22, 2026
- High7.1NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, making th…Check if you run itEPSS 0.41%Aug 22, 2026
- High8.7NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly inst…Check if you run itEPSS 0.65%Aug 22, 2026
- Medium6.9NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py.Check if you run itEPSS 0.33%Aug 22, 2026
- High8.7NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions.Check if you run itEPSS 0.51%Aug 22, 2026
- High8.2NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the co…Check if you run itEPSS 0.42%Aug 22, 2026
- High8.7NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root.Check if you run itEPSS 0.65%Aug 22, 2026
- Medium6.8nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely.Check if you run itEPSS 0.18%Aug 22, 2026
- Critical9.1Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them.Check if you run itEPSS 0.50%Aug 22, 2026
- Low2.0NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader.Check if you run itEPSS 0.17%Aug 22, 2026
- High8.7NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing…Check if you run itEPSS 1.10%Aug 22, 2026
- Medium6.3Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerab…Check if you run itEPSS 0.25%Aug 22, 2026
Sort