Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionCheck if you run itEPSS 0.10%Aug 3, 2026
- Unknownbpf: Support for hardening against JIT sprayingCheck if you run itEPSS 0.19%Jul 25, 2026
- Critical9.8smb: client: fix double-free in SMB2_ioctl() replayCheck if you run itEPSS 0.46%Jul 25, 2026
- High8.2OmniFaces is a utility library for Faces.Check if you run itEPSS 0.31%Jul 24, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchCheck if you run itEPSS 0.21%Jul 24, 2026
- UnknownCGA-wmwm-gv4v-h9jfOpen the advisoryJul 24, 2026
- High8.1Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement updateOpen the advisoryJul 23, 2026
- High8.6The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone.Check if you run itEPSS 0.21%Jul 22, 2026
- High7.5A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage.Check if you run itEPSS 0.54%Jul 22, 2026
- High7.5An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ proceCheck if you run itEPSS 0.43%Jul 22, 2026
- Medium6.8BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.Check if you run itEPSS 0.27%Jul 22, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataCheck if you run itEPSS 0.39%Jul 21, 2026
- High7.5A flaw was found in libssh.Check if you run itEPSS 0.44%Jul 21, 2026
- High7.3A flaw was found in libssh.Check if you run itEPSS 0.17%Jul 21, 2026
- High7.8i2c: stub: Reject I2C block transfers with invalid lengthCheck if you run itEPSS 0.13%Jul 20, 2026
- High7.8netfilter: ipset: fix race between dump and ip_set_list resizeCheck if you run itEPSS 0.10%Jul 20, 2026
- High7.8blk-mq: pop cached request if it is usableCheck if you run itEPSS 0.13%Jul 19, 2026
- High8.1macsec: fix replay protection at XPN lower-PN wrapCheck if you run itEPSS 0.34%Jul 19, 2026
- High7.1ipv6: validate extension header length before copying to cmsgCheck if you run itEPSS 0.17%Jul 19, 2026
- Critical9.8xfrm: esp: restore combined single-frag length gateCheck if you run itEPSS 0.71%Jul 19, 2026
- High7.1Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG functionCheck if you run itEPSS 0.12%Jul 17, 2026
- High7.1CGA-xr4w-f4q6-c8x6Open the advisoryJul 15, 2026
- High8.1Red Hat Security Advisory: nodejs22 security updateOpen the advisoryJul 15, 2026
- Medium5.5PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell CommandsCheck if you run itEPSS 0.18%Jul 13, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026