Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5WeeChat (Wee Enhanced Environment for Chat) is a free chat client.Check if you run itEPSS 0.48%Aug 21, 2026
- Medium5.3Element Web is a Matrix web client built using the Matrix React SDK.Check if you run itEPSS 0.55%Aug 21, 2026
- Critical9.2Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to t…Check if you run itEPSS 0.57%Aug 21, 2026
- Critical9.4DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption.Check if you run itEPSS 0.09%Aug 21, 2026
- Critical9.4Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding.Check if you run itEPSS 0.49%Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Check if you run itEPSS 0.73%Aug 21, 2026
- Critical9.3Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header.Check if you run itEPSS 0.61%Aug 21, 2026
- High7.7Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header.Check if you run itEPSS 0.59%Aug 21, 2026
- Critical9.6A flaw was found in FreeIPA.Check if you run itEPSS 0.35%Aug 20, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.85%Aug 14, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%Aug 14, 2026
- UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsCheck if you run itEPSS 0.57%Aug 13, 2026
- Low2.1A vulnerability has been found in Calix GigaSpire 26.1.0.Check if you run itEPSS 0.47%Aug 13, 2026
- Medium4.7Linux Foundationのbackstage/plugin-auth-backendにおけるオープンリダイレクトの脆弱性Check if you run itEPSS 0.17%Aug 13, 2026
- UnknownFGFM Authentication Weakening via CLI ConfigurationCheck if you run itEPSS 0.46%Aug 12, 2026
- High8.8Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Aug 11, 2026
- High7.4the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication.Check if you run itEPSS 0.35%Aug 11, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip…Open the advisoryAug 10, 2026
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parse_dfs_referrals() validates that the response c…Open the advisoryAug 10, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and…Open the advisoryAug 10, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on sched_engine alloc failure Avoid using intel_context_put() before in…Check if you run itEPSS 0.20%Aug 10, 2026
- High7.8ALSA: seq: close a re-opened queue timer in the destructorCheck if you run itEPSS 0.18%Aug 10, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesOpen the advisoryAug 7, 2026
- UnknownSynacor Zimbra Collaboration Suite (ZCS) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 7.44%Aug 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modifica…Check if you run itEPSS 0.13%Jul 25, 2026