Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: fix UAF in brcms_free_timer() brcms_free_timer() calls brcms_del_timer() which uses the non-syncCheck if you run itEPSS 0.18%Oct 6, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Oct 6, 2026
- High7.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graph…Check if you run itEPSS 0.49%Oct 6, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeroCheck if you run itEPSS 0.33%Oct 6, 2026
- High7.8xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()Check if you run itEPSS 0.14%Oct 6, 2026
- Critical9.8RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB accessCheck if you run itEPSS 0.38%Oct 6, 2026
- High7.0RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeedsCheck if you run itEPSS 0.13%Oct 6, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intentionally returns a referCheck if you run itEPSS 0.12%Oct 6, 2026
- UnknownRDMA/mad: Fix receive buffer leak when PKey enforcement failsCheck if you run itEPSS 0.17%Oct 6, 2026
- Unknownpppoatm: ensure a writable skb header and linear dataCheck if you run itEPSS 0.17%Oct 6, 2026
- Unknowndrm/xe/i2c: Disable IRQ on unbindCheck if you run itEPSS 0.15%Oct 6, 2026
- Unknowndrm/amdgpu: check ras and obj before dereferenceCheck if you run itEPSS 0.17%Oct 6, 2026
- High8.1cifs: Fix server use-after-free in cifs_chan_skip_or_disable()Check if you run itEPSS 0.40%Oct 6, 2026
- High7.8exec: Cleanup POSIX timers right after de_thread()Check if you run itEPSS 0.18%Oct 6, 2026
- Unknownscsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()Check if you run itEPSS 0.17%Oct 6, 2026
- Unknownwifi: iwlegacy: fix broadcast stations deallocationCheck if you run itEPSS 0.18%Oct 6, 2026
- High7.1smb: client: fix potential OOB read in smb3_enum_snapshots()Check if you run itEPSS 0.44%Oct 6, 2026
- High7.8drm/ttm: fix swapped-out resources never leaving their bulk_move rangeCheck if you run itEPSS 0.15%Oct 6, 2026
- UnknownCVE-2026-94543 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.51%Oct 6, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Oct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Oct 6, 2026
- High8.4PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encodingCheck if you run itEPSS 0.19%Oct 5, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionCheck if you run itEPSS 0.19%Oct 5, 2026
- Medium5.4Filament: Multi-factor authentication (app) management actions do not require password reauthenticationCheck if you run itEPSS 0.35%Oct 5, 2026
Sort