Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIvanti automation SQL Injection: HibernatePatch nowKEVEPSS 0.90%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.28%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 2, 2026
- Medium6.8Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permis…Check if you run itEPSS 0.17%Jul 1, 2026
- High7.5ClamAV ALZ Archive Processing Denial of Service VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV DMG File Processing Denial of Service VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV InstallShield File Format Processing Resource Exhaustion VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV PE File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- Medium4.7signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()Check if you run itEPSS 0.10%Jul 1, 2026
- Medium5.5net: bonding: fix NULL pointer dereference in bond_do_ioctl()Check if you run itEPSS 0.12%Jul 1, 2026
- UnknownQuantumCloud wpbot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.89%Jul 1, 2026
- Critical9.9Langflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.07%Jun 30, 2026
- Critical10.0Metasploit Wrap Up: Langflow, MongoDB, and MoreCheck if you run itEPSS 1.60%Jun 30, 2026
- High8.1The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length field of a framed ISO PDU start segment.Check if you run itEPSS 0.33%Jun 30, 2026
- Medium5.9The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descriptor directly from the calling thread immediatel…Check if you run itEPSS 0.38%Jun 30, 2026
- Low3.1A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a simultaneous bidirectional session disconnect.Check if you run itEPSS 0.17%Jun 30, 2026
- High8.1The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of eac…Check if you run itEPSS 0.42%Jun 30, 2026
- High7.5A flaw was found in GLib.Check if you run itEPSS 0.77%Jun 30, 2026
- High7.5A double free issue has been identified in libarchive's RAR5 reader.Check if you run itEPSS 0.79%Jun 30, 2026
- High7.5Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that…Check if you run itEPSS 0.87%Jun 29, 2026
- Medium6.8The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined…Check if you run itEPSS 0.33%Jun 29, 2026
- Medium5.5mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL.Check if you run itEPSS 0.15%Jun 29, 2026
- Medium5.3The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_ncm_send().Check if you run itEPSS 0.20%Jun 29, 2026
Sort