Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCisco NX-OS Software Python Sandbox Escape VulnerabilityCheck if you run itEPSS 0.11%Oct 7, 2026
- Unknownscsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()Check if you run itEPSS 0.18%Oct 6, 2026
- Critical9.1UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Pr…Check if you run itEPSS 0.34%Sep 21, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout Currently when calling xilinx_dma_p…Check if you run itEPSS 0.17%Sep 17, 2026
- High7.2ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmp_power driver registers handlers fo…Check if you run itEPSS 0.21%Aug 28, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers…Check if you run itEPSS 0.61%Aug 26, 2026
- High7.8ZDI-26-591: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.21%Aug 24, 2026
- High7.8ZDI-26-593: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.22%Aug 24, 2026
- High7.8ZDI-26-592: NVIDIA TensorRT ONNX File Parsing Improper Validation of Array Index Remote Code Execution VulnerabilityCheck if you run itEPSS 0.21%Aug 24, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on…Check if you run itEPSS 0.44%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART (PORT_LPC3220) can latch an RCheck if you run itEPSS 0.17%Aug 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing to userspace bnxt_re_alloc_ucontext() allocates uctx…Check if you run itEPSS 0.18%Aug 22, 2026
- Medium6.8In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing with…Check if you run itEPSS 0.16%Aug 21, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware teardown Free the toggle page only after firmware…Check if you run itEPSS 0.17%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The variable WQE mode must be validated against the maxim…Check if you run itEPSS 0.17%Aug 15, 2026
- High7.8ZDI-26-566: BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityCheck if you run itEPSS 0.16%Aug 13, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle partially initialized auxiliary devices bnxt_aux_devices_init() calls auxiliary_dev…Check if you run itEPSS 0.17%Aug 10, 2026
- Medium6.8BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.Check if you run itEPSS 0.27%Jul 22, 2026
- Medium5.5The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, called LPUART_Deinit() at the start of mcux_lpuart…Check if you run itEPSS 0.14%Jul 21, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.48%Jul 2, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the field in the TCP header refers to t…Check if you run itEPSS 0.49%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.9Apache Airflow's set the JWT auth cookie without the flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy (e.g.Check if you run itEPSS 0.38%Jun 1, 2026
- UnknownOut-of-bounds ReadPatch nowKEVEPSS 16.95%Jun 1, 2026