Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution VulnerabilityOpen the advisoryAug 12, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be…Check if you run itEPSS 0.12%Aug 12, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains When a TC filter attached to a qdisc fil…Check if you run itEPSS 0.16%Aug 12, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time (most of it…Check if you run itEPSS 0.16%Aug 12, 2026
- High8.6In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front len handle_get_version_reply() uses msg->front_all…Check if you run itEPSS 0.29%Aug 12, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on a…Check if you run itEPSS 0.12%Aug 12, 2026
- High8.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have aCheck if you run itEPSS 0.77%Aug 12, 2026
- High8.2A flaw was found in FreeIPA.Check if you run itEPSS 0.38%Aug 11, 2026
- High7.8ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.33%Aug 11, 2026
- Medium5.4インテルのAI Reference Modelsにおける保護メカニズムの不具合に関する脆弱性Check if you run itEPSS 0.16%Aug 11, 2026
- Medium6.9インテルのOpen VKLにおけるヒープベースのバッファオーバーフローの脆弱性Check if you run itEPSS 0.11%Aug 11, 2026
- Medium5.3A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding.Check if you run itEPSS 1.03%Aug 11, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityPatch nowKEVEPSS 87.51%Aug 11, 2026
- High8.1A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forg…Check if you run itEPSS 0.24%Aug 11, 2026
- High8.8A flaw was found in JBoss marshalling.Check if you run itEPSS 0.32%Aug 11, 2026
- High7.3Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Co…Check if you run itEPSS 0.32%Aug 11, 2026
- High7.6SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input.Check if you run itEPSS 0.40%Aug 11, 2026
- Low3.7SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enab…Check if you run itEPSS 0.19%Aug 11, 2026
- Critical9.1SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which…Check if you run itEPSS 0.77%Aug 11, 2026
- Medium5.3SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands.Check if you run itEPSS 0.47%Aug 11, 2026
- Critical9.8SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption.Check if you run itEPSS 0.64%Aug 11, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 0.33%Aug 11, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.38%Aug 11, 2026
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.62%Aug 11, 2026
- UnknownWeaver E-cology 8.0 SQL Injection File Read via SignatureDownLoadPatch nowKEVEPSS 0.63%Aug 11, 2026
Sort