Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.96%Sep 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in esp_ssg_unref() esp_ssg_unref() releases the page reference…Check if you run itEPSS 0.17%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_execute_get_log_page_rmi() lea…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: md: remove REQ_NOWAIT support from raid1/10/456 REQ_NOWAIT support in md personalities that can blo…Check if you run itEPSS 0.17%Sep 17, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent UAF/double-free race In smb2_lock(), mid-batch gra…Check if you run itEPSS 0.63%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: detach blocked lock requests before freeing A file_lock retained by ksmbd for byte-range loc…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound connections ksmbd_all_conn_set_status() treats every co…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size mana_gd_query_max_resources() sizes gc-…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.1The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unau…Check if you run itEPSS 0.16%Sep 17, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- Unknownpaytm payment_gateway Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 41.76%Sep 17, 2026
- UnknownCisco BroadWorks CommPilot Application Software Authorization Bypass VulnerabilityCheck if you run itEPSS 0.56%Sep 16, 2026
- UnknownCisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityCheck if you run itEPSS 0.19%Sep 16, 2026
- Medium4.9ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure VulnerabilityCheck if you run itEPSS 0.29%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmem_invalida…Check if you run itEPSS 0.21%Sep 16, 2026
- High7.2ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026
- High7.7ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026
- High7.7ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 14.03%Sep 16, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.64%Sep 15, 2026
- Medium5.5A flaw was found in SSSD (System Security Services Daemon).Check if you run itEPSS 0.14%Sep 14, 2026
- Medium4.3Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-actio…Check if you run itEPSS 0.37%Sep 14, 2026
- Critical9.0ZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution VulnerabilityCheck if you run itEPSS 0.48%Sep 14, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScr…Check if you run itEPSS 0.23%Sep 14, 2026