Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c).Check if you run itEPSS 0.47%Jun 4, 2026
- Medium6.3An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitation.c) leads to an out-of-bounds write.Check if you run itEPSS 0.36%Jun 4, 2026
- Medium5.5A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08.Check if you run itEPSS 0.40%Jun 3, 2026
- Low1.1A vulnerability was determined in sgl-project SGLang up to 0.5.11.Check if you run itEPSS 0.12%Jun 3, 2026
- Medium5.3Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.3Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSuppo…Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.5A vulnerability was found in crmeb crmeb_java 1.4.Check if you run itEPSS 0.29%Jun 3, 2026
- Medium4.8FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.44%Jun 3, 2026
- Medium6.9FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.47%Jun 3, 2026
- Medium4.1Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_pageCheck if you run itEPSS 0.32%Jun 3, 2026
- Medium6.5libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser.Check if you run itEPSS 0.45%Jun 3, 2026
- Low1.1A vulnerability has been found in mlrun up to 1.12.0-rc3.Check if you run itEPSS 0.07%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime.Check if you run itEPSS 0.51%Jun 3, 2026
- High7.3Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js.Check if you run itEPSS 0.30%Jun 3, 2026
- High7.1Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API.Check if you run itEPSS 0.17%Jun 3, 2026
- Medium4.7OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Check if you run itEPSS 0.09%Jun 3, 2026
- Medium5.1An authenticated user can persist arbitrary HTML/JavaScript in the email_id or mobile_no fields of a Customer record and trigger unescaped rendering in the Point of Sa…Check if you run itEPSS 0.41%Jun 3, 2026
- Medium6.5Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration.Check if you run itEPSS 0.37%Jun 3, 2026
- High8.6In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not supp…Check if you run itEPSS 0.72%Jun 3, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fix race condition between sysfs and perf mode When trying to run perf and sysf…Check if you run itEPSS 0.12%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k230 p…Check if you run itEPSS 0.16%Jun 3, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM warning When sunrpc is used, if a reset triggered, our wq may lead the…Check if you run itEPSS 0.68%Jun 3, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devm_add_action_or_reset() failure the provided clea…Check if you run itEPSS 0.17%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() This reverts commit f51424872760 ("A…Check if you run itEPSS 0.13%Jun 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2node().Check if you run itEPSS 0.12%Jun 3, 2026
Sort