Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX downlink decoder mux_dl_adb_decode() walks a chain…Check if you run itEPSS 0.40%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local-…Check if you run itEPSS 0.13%Aug 15, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup set_sctp_state() reads the SCTP chunk header…Check if you run itEPSS 0.59%Aug 15, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Commit 9a05475cebdd ("ipvs: avoid kmem_cache_z…Check if you run itEPSS 0.71%Aug 15, 2026
- High7.3In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsec_encrypt() macsec_encrypt() reads the Ethernet head…Check if you run itEPSS 0.17%Aug 15, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a P_DATA_REP…Check if you run itEPSS 0.72%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI domains sha…Check if you run itEPSS 0.13%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00lib_probe_dev() uses the full rt…Check if you run itEPSS 0.16%Aug 15, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211_gen_new_ie() copies ML probe response…Check if you run itEPSS 0.34%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in fwnode_init() If a firmware no…Check if you run itEPSS 0.18%Aug 15, 2026
- Medium4.3The ECS WordPress plugin before 4.3.13 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who…Check if you run itEPSS 0.25%Aug 15, 2026
- Critical9.8ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()Check if you run itEPSS 0.72%Aug 15, 2026
- Critical9.4cifs: validate DFS referral string offsetsCheck if you run itEPSS 0.59%Aug 15, 2026
- High7.8ocfs2: avoid moving extents to occupied clustersCheck if you run itEPSS 0.17%Aug 15, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationPatch nowKEVEPSS 3.52%Aug 15, 2026
- Medium6.5A flaw was found in Samba's CTDB, the clustered database service used by Samba.Check if you run itEPSS 0.34%Aug 14, 2026
- Medium5.8Duplicate Advisory: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports aOpen the advisoryAug 14, 2026
- Medium5.8Duplicate Advisory: SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readOpen the advisoryAug 14, 2026
- UnknownBIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addressesOpen the advisoryAug 14, 2026
- Medium6.9SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbiddenCheck if you run itEPSS 0.34%Aug 14, 2026
- Medium6.9SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readersCheck if you run itEPSS 0.33%Aug 14, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.85%Aug 14, 2026
- UnknownAvoid quadratic complexity in resolvePath in net/urlCheck if you run itEPSS 0.55%Aug 13, 2026
- Low2.1A vulnerability has been found in Calix GigaSpire 26.1.0.Check if you run itEPSS 0.47%Aug 13, 2026
- Low2.1A flaw has been found in Calix GigaSpire 26.1.0.Check if you run itEPSS 0.47%Aug 13, 2026
Sort