Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via…Check if you run itEPSS 0.30%Aug 10, 2026
- Critical9.3react-tracked provides state usage tracking with Proxies.Check if you run itEPSS 0.67%Aug 10, 2026
- High8.8A flaw was found in odh-dashboard.Check if you run itEPSS 0.66%Aug 10, 2026
- High7.5The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) parses the JSON metadata returned by the update ser…Check if you run itEPSS 0.47%Aug 10, 2026
- Low3.7The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z_impl_updatehub_probe().Check if you run itEPSS 0.35%Aug 10, 2026
- High8.7CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the remote backup transfer feature that allows authenticated at…Check if you run itEPSS 3.28%Aug 10, 2026
- High8.7CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attacke…Check if you run itEPSS 0.47%Aug 10, 2026
- High8.7Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code.Check if you run itEPSS 0.80%Aug 10, 2026
- Medium5.3FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.Check if you run itEPSS 0.34%Aug 10, 2026
- Medium6.9Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sani…Check if you run itEPSS 0.19%Aug 10, 2026
- High8.4OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS softwa…Check if you run itEPSS 0.18%Aug 10, 2026
- High8.4OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to…Check if you run itEPSS 0.14%Aug 10, 2026
- Medium5.7OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows Normal…Check if you run itEPSS 0.17%Aug 10, 2026
- High7.1CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sens…Check if you run itEPSS 0.46%Aug 10, 2026
- High8.7Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthentic…Check if you run itEPSS 0.68%Aug 10, 2026
- UnknownHCSEC-2026-26 - Vault vulnerable to LIST authorization bypass via trailing-slash stripCheck if you run itEPSS 0.27%Aug 10, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals a GSO segment skb_gso_segment() leaves the segm…Check if you run itEPSS 0.37%Aug 10, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing star…Check if you run itEPSS 0.26%Aug 10, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_sched_scan_results() can queu…Check if you run itEPSS 0.23%Aug 10, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: use wiphy work for socket owner autodisconnect nl80211_netlink_notify() walks the c…Check if you run itEPSS 0.16%Aug 10, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts Similar to recent commit 9b51a6155d14 ("bpf,fork: wipe ->…Check if you run itEPSS 0.13%Aug 10, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tp_recv() runs in the L…Check if you run itEPSS 0.19%Aug 10, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip…Check if you run itEPSS 0.51%Aug 10, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xe_bo_move() attaches VF CCS read/…Check if you run itEPSS 0.10%Aug 10, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously.Check if you run itEPSS 0.10%Aug 10, 2026
Sort