Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.0Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceledCheck if you run itEPSS 0.19%Aug 10, 2026
- UnknownAdobe Acrobat and Reader Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.21%Aug 10, 2026
- High7.5ClamAV XAR File Format Processing Memory Corruption VulnerabilityCheck if you run itEPSS 0.62%Aug 7, 2026
- High7.5ClamAV PESpin File Format Processing Integer Overflow VulnerabilityCheck if you run itEPSS 0.46%Aug 7, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesOpen the advisoryAug 7, 2026
- Medium6.3llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to t…Check if you run itEPSS 0.50%Aug 6, 2026
- High7.5league/commonmark: Denial of service via colliding heading slugsCheck if you run itEPSS 0.51%Aug 6, 2026
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 0.59%Aug 6, 2026
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 97.44%Aug 6, 2026
- Medium5.1A flaw was found in libkcapi.Check if you run itEPSS 0.20%Aug 5, 2026
- High7.3Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel…Check if you run itEPSS 0.14%Aug 5, 2026
- Medium6.5A flaw was found in libkcapi.Check if you run itEPSS 0.34%Aug 5, 2026
- High7.8xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()Check if you run itEPSS 0.12%Aug 5, 2026
- Unknownipv4: fib: free fib_alias with kfree_rcu() on insert error pathCheck if you run itEPSS 0.20%Aug 5, 2026
- Critical9.2FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Aug 4, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 27.86%Aug 3, 2026
- High7.1NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionCheck if you run itEPSS 0.10%Aug 3, 2026
- Unknownb3log siyuan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.39%Aug 3, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 14.62%Aug 2, 2026
- Unknownwpmanageninja ninja_tables Embedded Malicious CodePatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodePatch nowKEVEPSS 0.67%Aug 1, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 7.88%Aug 1, 2026
- High7.5Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit.Check if you run itEPSS 0.52%Jul 31, 2026
- UnknownMicrosoft Windows Group Policy Elevation of Privilege VulnerabilityPatch nowKEVEPSS 6.40%Jul 30, 2026
- High7.8posix-cpu-timers: Prevent UAF caused by non-leader exec() raceCheck if you run itEPSS 0.50%Jul 29, 2026
Sort