Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intentionally returns a referCheck if you run itEPSS 0.12%Oct 6, 2026
- UnknownRDMA/mad: Fix receive buffer leak when PKey enforcement failsCheck if you run itEPSS 0.17%Oct 6, 2026
- Unknownpppoatm: ensure a writable skb header and linear dataCheck if you run itEPSS 0.17%Oct 6, 2026
- Unknowndrm/xe/i2c: Disable IRQ on unbindCheck if you run itEPSS 0.15%Oct 6, 2026
- Unknowndrm/amdgpu: check ras and obj before dereferenceCheck if you run itEPSS 0.17%Oct 6, 2026
- High8.1cifs: Fix server use-after-free in cifs_chan_skip_or_disable()Check if you run itEPSS 0.40%Oct 6, 2026
- High7.8exec: Cleanup POSIX timers right after de_thread()Check if you run itEPSS 0.18%Oct 6, 2026
- Unknownscsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()Check if you run itEPSS 0.17%Oct 6, 2026
- Unknownwifi: iwlegacy: fix broadcast stations deallocationCheck if you run itEPSS 0.18%Oct 6, 2026
- High7.1smb: client: fix potential OOB read in smb3_enum_snapshots()Check if you run itEPSS 0.44%Oct 6, 2026
- High7.8drm/ttm: fix swapped-out resources never leaving their bulk_move rangeCheck if you run itEPSS 0.16%Oct 6, 2026
- UnknownCVE-2026-94543 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.51%Oct 6, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Oct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Oct 6, 2026
- High8.4PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encodingCheck if you run itEPSS 0.19%Oct 5, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionCheck if you run itEPSS 0.19%Oct 5, 2026
- Medium5.4Filament: Multi-factor authentication (app) management actions do not require password reauthenticationCheck if you run itEPSS 0.35%Oct 5, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresCheck if you run itEPSS 0.27%Oct 5, 2026
- Unknownuv: Path traversal on Windows through wheel extractionCheck if you run itEPSS 0.43%Oct 5, 2026
- High7.5vLLM is an inference and serving engine for large language models.Check if you run itEPSS 0.41%Oct 5, 2026
- Medium6.5Snowflake drivers writes sensitive information to logsCheck if you run itEPSS 0.09%Oct 5, 2026
- Low3.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.19%Oct 5, 2026
- Medium5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.42%Oct 5, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 99.48%Oct 5, 2026
Sort