Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting caseless retry ksmbd_vfs_path_lookup() enforces…Check if you run itEPSS 0.62%Jul 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modifica…Check if you run itEPSS 0.13%Jul 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as repor…Check if you run itEPSS 0.16%Jul 25, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a…Check if you run itEPSS 0.15%Jul 25, 2026
- Medium5.5io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work itemCheck if you run itEPSS 0.13%Jul 25, 2026
- High7.8ipv4: igmp: remove multicast group from hash table on device destructionCheck if you run itEPSS 0.13%Jul 25, 2026
- High7.1net: ipv4: bound TCP reordering sysctl writes and MTU probe sizesCheck if you run itEPSS 0.14%Jul 25, 2026
- High7.0netfilter: ebtables: zero chainstack arrayCheck if you run itEPSS 0.13%Jul 25, 2026
- High7.1netfilter: ebtables: module names must be null-terminatedCheck if you run itEPSS 0.13%Jul 25, 2026
- High7.1netfilter: ebtables: terminate table name before find_table_lock()Check if you run itEPSS 0.13%Jul 25, 2026
- High7.8proc: protect ptrace_may_access() with exec_update_lock (FD links)Check if you run itEPSS 0.10%Jul 25, 2026
- Medium5.5proc: protect ptrace_may_access() with exec_update_lock (part 1)Check if you run itEPSS 0.13%Jul 25, 2026
- Medium5.5posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error pathCheck if you run itEPSS 0.13%Jul 25, 2026
- High7.1isofs: bound Rock Ridge symlink components to the SL recordCheck if you run itEPSS 0.17%Jul 25, 2026
- High7.8i2c: core: fix adapter deregistration raceCheck if you run itEPSS 0.13%Jul 25, 2026
- High8.2OmniFaces is a utility library for Faces.Check if you run itEPSS 0.31%Jul 24, 2026
- Medium5.1GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers t…Check if you run itEPSS 0.24%Jul 23, 2026
- Medium5.1GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject…Check if you run itEPSS 0.24%Jul 23, 2026
- Medium5.3Missing Authorization vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Con…Check if you run itEPSS 0.31%Jul 23, 2026
- High7.8traefik traefik Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.62%Jul 22, 2026
- High7.6The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command siz…Check if you run itEPSS 0.16%Jul 21, 2026
- Medium5.5The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock_frequency / config->frequency without validating config->frequency.Check if you run itEPSS 0.14%Jul 21, 2026
- High8.1The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from an I2C bus master byte-by-byte in mctp_…Check if you run itEPSS 0.39%Jul 21, 2026
- Medium6.5The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy of the user-supplied k_poll_event[] via z_thread_malloc() and then…Check if you run itEPSS 0.14%Jul 21, 2026
- Medium6.5In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdog timer unconditio…Check if you run itEPSS 0.39%Jul 21, 2026
Sort