Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permis…Check if you run itEPSS 0.17%Jul 1, 2026
- High7.8drm/i915/gem: Fix phys BO pread/pwrite with offsetCheck if you run itEPSS 0.13%Jul 1, 2026
- Medium4.7signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()Check if you run itEPSS 0.10%Jul 1, 2026
- Medium5.5ASoC: wm_adsp: Fix NULL dereference when removing firmware controlsCheck if you run itEPSS 0.12%Jul 1, 2026
- Medium5.5netfilter: nf_conntrack: destroy stale expectfn expectations on unregisterCheck if you run itEPSS 0.12%Jul 1, 2026
- Medium5.5net: bonding: fix NULL pointer dereference in bond_do_ioctl()Check if you run itEPSS 0.12%Jul 1, 2026
- Critical9.9Langflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.55%Jun 30, 2026
- High8.1The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length field of a framed ISO PDU start segment.Check if you run itEPSS 0.33%Jun 30, 2026
- Medium5.9The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descriptor directly from the calling thread immediatel…Check if you run itEPSS 0.38%Jun 30, 2026
- Low3.1A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a simultaneous bidirectional session disconnect.Check if you run itEPSS 0.17%Jun 30, 2026
- High8.1The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of eac…Check if you run itEPSS 0.42%Jun 30, 2026
- High7.4Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TT…Check if you run itEPSS 0.41%Jun 30, 2026
- Medium5.3A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up…Check if you run itEPSS 0.49%Jun 30, 2026
- High8.8Citrix NetScaler ADC and NetScaler Gateway Out-of-bounds ReadPatch nowKEVEPSS 0.50%Jun 30, 2026
- High7.5A flaw was found in GLib.Check if you run itEPSS 0.84%Jun 30, 2026
- High8.6A flaw was found in GLib.Check if you run itEPSS 0.56%Jun 30, 2026
- High8.2A flaw was found in GLib.Check if you run itEPSS 0.50%Jun 30, 2026
- High8.2A flaw was found in GLib.Check if you run itEPSS 0.49%Jun 30, 2026
- High7.5A flaw was found in GLib.Check if you run itEPSS 0.47%Jun 30, 2026
- High8.2A flaw was found in GLib.Check if you run itEPSS 0.49%Jun 30, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.49%Jun 30, 2026
- Critical9.1Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"Check if you run itEPSS 0.55%Jun 30, 2026
- Critical10.0Adobe ColdFusion Path Traversal VulnerabilityPatch nowKEVEPSS 42.39%Jun 30, 2026
- High7.5A double free issue has been identified in libarchive's RAR5 reader.Check if you run itEPSS 0.79%Jun 30, 2026
- High8.8Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 1.01%Jun 30, 2026
Sort