Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 2, 2026
- Medium5.5net: bonding: fix NULL pointer dereference in bond_do_ioctl()Check if you run itEPSS 0.12%Jul 1, 2026
- UnknownQuantumCloud wpbot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.89%Jul 1, 2026
- High7.5Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that…Check if you run itEPSS 0.87%Jun 29, 2026
- Medium6.2A flaw was found in p11-kit.Check if you run itEPSS 0.20%Jun 29, 2026
- UnknownGogs Gogs Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.93%Jun 28, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityPatch nowKEVEPSS 2.10%Jun 26, 2026
- High8.1A flaw was found in Keycloak Policy Enforcer.Check if you run itEPSS 0.65%Jun 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlv_data_is_valid() reads each adverti…Check if you run itEPSS 0.12%Jun 25, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb->data to pr…Check if you run itEPSS 0.27%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft_exthdr_init() passes user-contr…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig net/bluetooth/l2cap_core.c:l2cap_sig_…Check if you run itEPSS 0.13%Jun 25, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL A deferred byte-range lock…Check if you run itEPSS 0.45%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain response data copy to allocation size tb_xdp_properties_request() derive…Check if you run itEPSS 0.14%Jun 25, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tb_xdp_handle_request() casts th…Check if you run itEPSS 0.27%Jun 25, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected…Check if you run itEPSS 0.37%Jun 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsing in epaddr_len(),…Check if you run itEPSS 0.63%Jun 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request…Check if you run itEPSS 0.17%Jun 24, 2026
- High8.4Langflow Authorization Bypass Through User-Controlled Key VulnerabilityPatch nowKEVEPSS 0.89%Jun 23, 2026
- Highgithubtoplanguages: Command Injection via Issue Title in Discord Notification WorkflowCheck if you run itEPSS 0.53%Jun 19, 2026
- Critical9.6NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing.Check if you run itEPSS 0.35%Jun 18, 2026
- High7.8A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled envirCheck if you run itEPSS 0.16%Jun 18, 2026
- UnknownDrupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008Check if you run itEPSS 0.22%Jun 17, 2026
- Medium4.8In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c builds an echo-reply packet (reply), hands it to net_try_send_data(), and then, o…Check if you run itEPSS 0.23%Jun 16, 2026
- High7.5subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has been handed to net_try_send_data().Check if you run itEPSS 0.35%Jun 16, 2026