Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL…Check if you run itEPSS 0.49%Aug 24, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.Check if you run itEPSS 0.43%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.23%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- Medium6.0The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates.Check if you run itEPSS 0.24%Aug 24, 2026
- High8.7The HTTP media server running on DJI drones serves stored photos and videos through the endpoint without authenticating the requesting client.Check if you run itEPSS 0.41%Aug 24, 2026
- Medium4.0ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery VulnerabilityCheck if you run itEPSS 0.12%Aug 24, 2026
- Medium6.9BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC…Check if you run itEPSS 0.41%Aug 24, 2026
- Low2.1A flaw has been found in Open5GS 2.8.0.Check if you run itEPSS 0.37%Aug 24, 2026
- Low2.1A vulnerability was detected in Open5GS 2.8.0.Check if you run itEPSS 0.28%Aug 24, 2026
- Low2.1A security vulnerability has been detected in Open5GS 2.8.0.Check if you run itEPSS 0.56%Aug 24, 2026
- Medium5.3Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line.Check if you run itEPSS 0.42%Aug 23, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() The SMC…Check if you run itEPSS 0.18%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlink_nl_reload_doit() calls devlink_netns_ge…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() reqsk_queue_hash_req() publishes a…Check if you run itEPSS 0.13%Aug 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: vhost_iotlb: bound map allocation in add_range vhost_iotlb_add_range_ctx() only retires an old entr…Check if you run itEPSS 0.18%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight…Check if you run itEPSS 0.13%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags aft…Check if you run itEPSS 0.21%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of s…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obta…Check if you run itEPSS 0.18%Aug 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protect…Check if you run itEPSS 0.18%Aug 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost_scsi_setup_vq_cmds() runs from VHOST_SCSI_S…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Another challenge w…Check if you run itEPSS 0.13%Aug 22, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max_qlen accounting across reuseport migration A listener's TCP_FASTOPEN max_qlen stop…Check if you run itEPSS 0.49%Aug 22, 2026