Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file…Check if you run itEPSS 0.18%Sep 11, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() coalesce_t2() computes…Check if you run itEPSS 0.49%Sep 11, 2026
- UnknownREJECTED: CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNCOpen the advisorySep 11, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext2_xattr_set2() had a construc…Check if you run itEPSS 0.60%Sep 11, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho_preserved_memory_reserve() kho_preserved_memory_reserve() calculat…Check if you run itEPSS 0.21%Sep 11, 2026
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 gss_krb5_verify_mic_v2() reads t…Check if you run itEPSS 0.65%Sep 11, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails When svc_rdma_listen_handler() handles R…Check if you run itEPSS 0.24%Sep 11, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc_xprt_put to free listener on create failure svc_rdma_create() calls kfree(cma_xprt…Check if you run itEPSS 0.22%Sep 11, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENT_GET_INFO stores guest-controlled…Check if you run itEPSS 0.17%Sep 11, 2026
- Medium5.7When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive.Check if you run itEPSS 0.61%Sep 11, 2026
- High7.3Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.Check if you run itEPSS 0.16%Sep 11, 2026
- Low3.5The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it,…Check if you run itEPSS 0.24%Sep 11, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 97.36%Sep 11, 2026
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 10, 2026
- High7.0A flaw was found in the admin backend of gvfs.Check if you run itEPSS 0.22%Sep 10, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could haveCheck if you run itEPSS 0.64%Sep 10, 2026
- Low3.0Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute fil…Check if you run itEPSS 0.33%Sep 9, 2026
- Medium4.3The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read.Check if you run itEPSS 0.39%Sep 9, 2026
- High7.5A flaw was found in SSSD's IdP authentication provider.Check if you run itEPSS 0.33%Sep 9, 2026
- High8.1A flaw was found in FreeIPA.Check if you run itEPSS 0.42%Sep 9, 2026
- High7.2CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)Check if you run itEPSS 0.67%Sep 9, 2026
- Medium4.0CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)Check if you run itEPSS 0.78%Sep 9, 2026
- Low1.1CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)Check if you run itEPSS 0.51%Sep 9, 2026
- Medium6.9PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources.Check if you run itEPSS 0.55%Sep 9, 2026
- High8.8A flaw was found in bubblewrap.Check if you run itEPSS 0.21%Sep 9, 2026
Sort