Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Incus is a system container and virtual machine manager.Check if you run itEPSS 0.66%Aug 21, 2026
- Critical9.3Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 23.16%Aug 19, 2026
- UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsCheck if you run itEPSS 0.57%Aug 13, 2026
- Critical9.1subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri, size CONFIG_LWM2M_SWMGMT_PACKAGE_URI_LEN, def…Check if you run itEPSS 0.58%Jul 14, 2026
- High7.5A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin.Check if you run itEPSS 0.58%Jul 9, 2026
- Low3.7A logic vulnerability was found in GStreamer's webrtcbin component.Check if you run itEPSS 0.23%Jul 7, 2026
- High8.1A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so itCheck if you run itEPSS 0.31%Jul 3, 2026
- High7.5Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that…Check if you run itEPSS 0.87%Jun 29, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When parsing fails after we've matched th…Check if you run itEPSS 0.40%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer object, e.g.Check if you run itEPSS 0.13%Jun 25, 2026
- High7.8l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()Check if you run itEPSS 0.12%Jun 25, 2026
- High7.8drm/gem: Try to fix change_handle ioctl, attempt 4Check if you run itEPSS 0.10%Jun 25, 2026
- Medium6.6A flaw was found in GnuTLS.Check if you run itEPSS 0.20%Jun 16, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityPatch nowKEVEPSS 99.91%Jun 9, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow i…Check if you run itEPSS 0.19%Jun 8, 2026
- High8.8A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c).Check if you run itEPSS 0.47%Jun 4, 2026
- High7.1Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API.Check if you run itEPSS 0.17%Jun 3, 2026
- Medium5.9Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding.Check if you run itEPSS 0.19%Jun 3, 2026
- Unknowncrypton-x509-validation and crypton-x509 do not enforce X.509 Name ConstraintsCheck if you run itEPSS 0.32%Jun 3, 2026
- Low3.8OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.Check if you run itEPSS 0.17%Jun 2, 2026
- Medium5.5OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.Check if you run itEPSS 0.17%Jun 2, 2026
- Low3.7A flaw was found in gnutls.Check if you run itEPSS 0.63%Jun 1, 2026
- Medium5.9Apache Airflow's EmailOperator and the underlying helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment used witho…Check if you run itEPSS 0.27%Jun 1, 2026
- Medium5.9Apache Airflow's set the JWT auth cookie without the flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy (e.g.Check if you run itEPSS 0.38%Jun 1, 2026
- High8.8It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname.Check if you run itEPSS 0.26%Jun 1, 2026