Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Fix afs_lookup_server() to not free an existCheck if you run itEPSS 0.16%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure.Check if you run itEPSS 0.16%Sep 25, 2026
- Medium6.4The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cjtoolbox shortcode in all versions up to, and includin…Check if you run itEPSS 0.15%Sep 25, 2026
- Medium6.5Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path to bypass the locatiCheck if you run itEPSS 0.55%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentCheck if you run itEPSS 0.54%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCreCheck if you run itEPSS 0.44%Sep 25, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Sep 25, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.58%Sep 25, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Sep 25, 2026
- Unknownelementor Website Builder Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.19%Sep 25, 2026
- UnknownRejected reason: This CVE is a duplicate of another CVE.Open the advisorySep 24, 2026
- UnknownCVE-2026-76447 is listed by Cisco Identity Services Engine Authentication Bypass Vulnerabilities.Check if you run itEPSS 0.38%Sep 24, 2026
- UnknownCVE-2026-76446 is listed by Cisco Identity Services Engine Authentication Bypass Vulnerabilities.Check if you run itEPSS 0.38%Sep 24, 2026
- UnknownCVE-2026-76444 is listed by Cisco Identity Services Engine Authentication Bypass Vulnerabilities.Check if you run itEPSS 0.35%Sep 24, 2026
- UnknownCVE-2026-76439 is listed by Cisco Identity Services Engine Authentication Bypass Vulnerabilities.Check if you run itEPSS 0.39%Sep 24, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the cu…Check if you run itEPSS 0.35%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 The changes introduced to hand…Check if you run itEPSS 0.19%Sep 24, 2026
- High7.4In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xive_init_ipis() fails (e.g.Check if you run itEPSS 0.14%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock [FALSE ALERTS] There is a bug rep…Check if you run itEPSS 0.20%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpi_bus_get_primary_device() The function used for obtaining the first "physi…Check if you run itEPSS 0.21%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xe_wedged@wedged-at-any-tim…Check if you run itEPSS 0.20%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it w…Check if you run itEPSS 0.24%Sep 24, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd_net boolean flags to unsigned long flags word nfsd_net contains several boolean…Check if you run itEPSS 0.42%Sep 24, 2026
- Medium4.3HCL Sametime is vulnerable to insufficient input sanitization.Check if you run itEPSS 0.21%Sep 24, 2026
- Unknownbtrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()Check if you run itEPSS 0.17%Sep 24, 2026
Sort