Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri, size CONFIG_LWM2M_SWMGMT_PACKAGE_URI_LEN, def…Check if you run itEPSS 0.58%Jul 14, 2026
- High7.1In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init() in kernel/pipe.c used K_SYSCALL_OBJ() (which requires the kernel object to…Check if you run itEPSS 0.16%Jul 14, 2026
- Medium5.5The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kernel/thread.c) calls k_object_find() on the caller…Check if you run itEPSS 0.15%Jul 14, 2026
- High7.8On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the architecture hook that verifies a user-mode-su…Check if you run itEPSS 0.18%Jul 14, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityPatch nowKEVEPSS 69.54%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 15.87%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.01%Jul 14, 2026
- High7.8Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 0.35%Jul 14, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- High8.8Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a before 2.9.1.Check if you run itEPSS 0.42%Jul 13, 2026
- High7.5A flaw was found in the vllm-orchestrator-gateway component.Check if you run itEPSS 0.52%Jul 13, 2026
- Low2.1A vulnerability was identified in pig-mesh Pig up to 3.9.2.Check if you run itEPSS 0.39%Jul 13, 2026
- High8.9A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8.Check if you run itEPSS 4.73%Jul 12, 2026
- Low2.1A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30.Check if you run itEPSS 0.35%Jul 12, 2026
- Low2.1A vulnerability was detected in coollabsio Coolify up to 4.1.1.Check if you run itEPSS 0.35%Jul 12, 2026
- High7.1A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3.Check if you run itEPSS 0.20%Jul 12, 2026
- Low2.0A weakness has been identified in vnotex vnote up to 3.20.1.Check if you run itEPSS 0.33%Jul 12, 2026
- Medium4.6The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numake…Check if you run itEPSS 0.23%Jul 12, 2026
- High7.8Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated…Check if you run itEPSS 0.15%Jul 12, 2026
- Critical9.8parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buff…Check if you run itEPSS 0.65%Jul 12, 2026
- High7.4In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c linearizes an inbound transport-data payload into a fixed pool buf…Check if you run itEPSS 0.60%Jul 12, 2026
- Medium5.0The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drivers/wifi/nrf_wifi/src/wifi_mgmt.c copied TWT (Target Wake Time) flow…Check if you run itEPSS 0.22%Jul 12, 2026
- Medium6.1In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/usb/host/usbh_device.c) freed the root usb_device slab object without…Check if you run itEPSS 0.24%Jul 12, 2026
Sort