Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownHCSEC-2026-29 - Packer vulnerable to arbitrary file write via crafted plugin archive during installationCheck if you run itEPSS 0.19%Aug 17, 2026
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 10.02%Aug 17, 2026
- Unknown[20260810] - Core - Unrestricted uploads of SHTML filesCheck if you run itEPSS 0.65%Aug 17, 2026
- Unknown[20260809] - Core - Improper ACL checks when injection schema.org contact dataCheck if you run itEPSS 0.29%Aug 17, 2026
- Unknown[20260808] - Core - Improper ACL checks for batch copy actionsCheck if you run itEPSS 0.29%Aug 17, 2026
- Unknown[20260807] - Core - MFA Authentication BypassCheck if you run itEPSS 0.46%Aug 17, 2026
- Unknown[20260806] - Core - XSS through schema.org outputsCheck if you run itEPSS 0.27%Aug 17, 2026
- Unknown[20260805] - Core - Improper ACL checks for category webservice endpointsCheck if you run itEPSS 0.26%Aug 17, 2026
- Unknown[20260804] - Core - Improper ACL checks for custom fields webservice endpointsCheck if you run itEPSS 0.26%Aug 17, 2026
- Unknown[20260803] - Core - Inconsistent ACL checks for mutating webservice endpointsCheck if you run itEPSS 0.34%Aug 17, 2026
- Unknown[20260802] - Core - Improper CORS origin validationCheck if you run itEPSS 0.34%Aug 17, 2026
- UnknownCVE-2026-19650 is listed by GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11.Check if you run itEPSS 0.21%Aug 17, 2026
- Critical9.1GitLab GitLab Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.15%Aug 17, 2026
- High8.7SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event streamCheck if you run itEPSS 0.54%Aug 15, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for rescue mounts [BUG] Mounting with rescue=ibadroots…Check if you run itEPSS 0.21%Aug 15, 2026
- Critical9.3In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fix race between LPI release and re-registration Fix a potential race between dec…Check if you run itEPSS 0.19%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and notify fib6_check_nh_list() and __ne…Check if you run itEPSS 0.17%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush nh_rt_cache_flush() walks nh->f6i_list d…Check if you run itEPSS 0.17%Aug 15, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it en…Check if you run itEPSS 0.21%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds u32_change() copies the user-p…Check if you run itEPSS 0.13%Aug 15, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Fix the handling of folio_queue allo…Check if you run itEPSS 0.21%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback There is theoretical UAF if the c…Check if you run itEPSS 0.38%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback There is theoretical UAF if the co…Check if you run itEPSS 0.18%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX…Check if you run itEPSS 0.18%Aug 15, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA…Check if you run itEPSS 0.22%Aug 15, 2026
Sort