Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that…Check if you run itEPSS 0.87%Jun 29, 2026
- Medium6.8The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined…Check if you run itEPSS 0.33%Jun 29, 2026
- Medium5.5mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL.Check if you run itEPSS 0.15%Jun 29, 2026
- Medium5.3The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_ncm_send().Check if you run itEPSS 0.20%Jun 29, 2026
- High8.8A use-after-free issue was addressed with improved memory management.Check if you run itEPSS 1.26%Jun 29, 2026
- Medium6.2A flaw was found in p11-kit.Check if you run itEPSS 0.15%Jun 29, 2026
- High7.3A flaw was found in libtiff.Check if you run itEPSS 0.43%Jun 29, 2026
- High7.5ollyo helix3 Improper Access ControlPatch nowKEVEPSS 0.99%Jun 29, 2026
- Medium5.5agp/amd64: Fix broken error propagation in agp_amd64_probe()Check if you run itEPSS 0.13%Jun 29, 2026
- High7.4Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) passes a pointer to a stack-allocated state object (struct getaddrinfo_state a…Check if you run itEPSS 0.45%Jun 28, 2026
- Low3.1The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PIC32CM-JH SoC family, contains an out-of-bounds write in its asynchronous (DMA…Check if you run itEPSS 0.22%Jun 28, 2026
- Medium6.5The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications.Check if you run itEPSS 0.30%Jun 28, 2026
- High7.8Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using…Check if you run itEPSS 0.16%Jun 28, 2026
- Critical10.0Joomlack Page Builder Improper Access Control VulnerabilityPatch nowKEVEPSS 30.87%Jun 27, 2026
- Critical10.0Kestra kestra Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.30%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allo…Check if you run itEPSS 0.16%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind syzbot reported a kernel BUG tr…Check if you run itEPSS 0.16%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED [Why] dcn32_…Check if you run itEPSS 0.12%Jun 26, 2026
- Medium5.5mailbox: add sanity check for channel arrayCheck if you run itEPSS 0.13%Jun 26, 2026
- High8.5Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.Check if you run itEPSS 0.58%Jun 26, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions.Check if you run itEPSS 0.25%Jun 26, 2026
- High8.7Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks.Check if you run itEPSS 0.54%Jun 26, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.Check if you run itEPSS 0.25%Jun 26, 2026
- Critical9.3Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.Check if you run itEPSS 1.44%Jun 26, 2026
- High7.5Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions.Check if you run itEPSS 0.43%Jun 26, 2026
Sort