Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper validation of clie…Check if you run itEPSS 0.25%Sep 18, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: NFS: Return a delegation the client fails to record When an NFS server grants a delegation in an OP…Check if you run itEPSS 0.61%Sep 17, 2026
- Critical9.8NFSv4.1: zero referring call lists before decodingCheck if you run itEPSS 0.61%Sep 17, 2026
- UnknownCisco Identity Services Engine Cross-Site Scripting VulnerabilityCheck if you run itEPSS 0.19%Sep 16, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file…Check if you run itEPSS 0.17%Sep 11, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2() computes…Check if you run itEPSS 0.49%Sep 11, 2026
- High7.5nfsd: validate symlink target length in NFSv4 CREATECheck if you run itEPSS 0.50%Sep 11, 2026
- High8.2nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATECheck if you run itEPSS 0.62%Sep 11, 2026
- Critical9.1smb: client: reject a tree connect response whose byte count is too smallCheck if you run itEPSS 0.44%Sep 11, 2026
- UnknownSogou Input Method 'biz_helper' Remote Code ExecutionPatch nowKEVEPSS 0.93%Sep 10, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- UnknownCVE-2026-81838 - Zip Slip path traversal in awsdac (diagram-as-code)Check if you run itEPSS 0.20%Sep 9, 2026
- High8.1A flaw was found in FreeIPA.Check if you run itEPSS 0.42%Sep 9, 2026
- Medium4.0CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)Check if you run itEPSS 0.51%Sep 9, 2026
- Medium6.9PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources.Check if you run itEPSS 0.40%Sep 9, 2026
- High7.5Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionCheck if you run itEPSS 1.90%Sep 8, 2026
- Critical9.8A flaw was found in FreeIPA.Check if you run itEPSS 1.21%Sep 7, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 1.03%Sep 5, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.56%Sep 5, 2026
- UnknownMikroTik RouterOS Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 6.45%Sep 5, 2026
- High7.6A flaw was found in libsoup.Check if you run itEPSS 0.27%Sep 4, 2026
- Critical9.3MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables.Check if you run itEPSS 0.81%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges.Check if you run itEPSS 0.81%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of ServiceCheck if you run itEPSS 0.63%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet AllocationCheck if you run itEPSS 0.76%Sep 3, 2026