Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8smb: client: fix double-free in SMB2_ioctl() replayCheck if you run itEPSS 0.46%Jul 25, 2026
- High7.5A flaw was found in libssh.Check if you run itEPSS 0.44%Jul 21, 2026
- High7.3A flaw was found in libssh.Check if you run itEPSS 0.17%Jul 21, 2026
- Medium5.3A denial-of-service and resource exhaustion vulnerability exists within the component of GLib.Check if you run itEPSS 0.48%Jul 20, 2026
- Unknowneclipse jetty Improper Access ControlPatch nowKEVEPSS 6.36%Jul 20, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 77.97%Jul 19, 2026
- Medium5.0Path traversal in CLI command allows deletion of root file systemCheck if you run itEPSS 0.25%Jul 14, 2026
- UnknownMissed certificate verification in AD Connector communication with FortiClient EMSCheck if you run itEPSS 0.22%Jul 14, 2026
- Medium6.4The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single fil…Check if you run itEPSS 0.25%Jul 11, 2026
- High7.1A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin.Check if you run itEPSS 0.33%Jul 9, 2026
- Unknowniqonic wpbookit Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 9, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 2.05%Jul 8, 2026
- High8.1Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0Check if you run itEPSS 0.40%Jul 7, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplCheck if you run itEPSS 0.29%Jul 6, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026
- Medium5.9The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descriptor directly from the calling thread immediatel…Check if you run itEPSS 0.38%Jun 30, 2026
- High7.5A flaw was found in GLib.Check if you run itEPSS 0.77%Jun 30, 2026
- High7.5Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that…Check if you run itEPSS 0.87%Jun 29, 2026
- Medium6.5The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications.Check if you run itEPSS 0.30%Jun 28, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL A deferred byte-range lock…Check if you run itEPSS 0.45%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ack_backlog leak on failed handshake When vmci_transport_recv_connecting_server(…Check if you run itEPSS 0.13%Jun 25, 2026
- Unknownfossbilling fossbilling Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 1.91%Jun 25, 2026
- Unknownbarix sip_client_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.84%Jun 25, 2026
- High7.8Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesOpen the advisoryJun 24, 2026
- Medium6.1A flaw was found in OpenSSH.Check if you run itEPSS 0.14%Jun 23, 2026