Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsec_encrypt() macsec_encrypt() reads the Ethernet head…Check if you run itEPSS 0.17%Aug 15, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a P_DATA_REP…Check if you run itEPSS 0.72%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unregistering This ensures that any RCU readers traver…Check if you run itEPSS 0.13%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI domains sha…Check if you run itEPSS 0.13%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00lib_probe_dev() uses the full rt…Check if you run itEPSS 0.16%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmf_notify_auth_frame_rx() takes the…Check if you run itEPSS 0.35%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware() copies patch_length - 4 byt…Check if you run itEPSS 0.17%Aug 15, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 tra…Check if you run itEPSS 0.71%Aug 15, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211_gen_new_ie() copies ML probe response…Check if you run itEPSS 0.34%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame layout before RX Extension frames only have the extension…Check if you run itEPSS 0.36%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in fwnode_init() If a firmware no…Check if you run itEPSS 0.18%Aug 15, 2026
- Medium4.3The ECS WordPress plugin before 4.3.13 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who…Check if you run itEPSS 0.25%Aug 15, 2026
- Critical9.8ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()Check if you run itEPSS 0.72%Aug 15, 2026
- Critical9.4cifs: validate DFS referral string offsetsCheck if you run itEPSS 0.59%Aug 15, 2026
- Critical9.3KVM: arm64: vgic: Check the interrupt is still ours before migrating itCheck if you run itEPSS 0.18%Aug 15, 2026
- High7.8ocfs2: avoid moving extents to occupied clustersCheck if you run itEPSS 0.17%Aug 15, 2026
- High7.8cpu: hotplug: Bound hotplug states sysfs outputCheck if you run itEPSS 0.18%Aug 15, 2026
- Medium4.9The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all vers…Check if you run itEPSS 0.58%Aug 15, 2026
- High7.2The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in al…Check if you run itEPSS 0.42%Aug 15, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationPatch nowKEVEPSS 2.30%Aug 15, 2026
- Unknowncozmoslabs profile_builder Incorrect Type Conversion or CastPatch nowKEVEPSS 3.90%Aug 15, 2026
- Medium6.5A flaw was found in Samba's CTDB, the clustered database service used by Samba.Check if you run itEPSS 0.34%Aug 14, 2026
- UnknownPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.Check if you run itEPSS 0.33%Aug 14, 2026
- Medium6.9SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbiddenCheck if you run itEPSS 0.34%Aug 14, 2026
- Medium6.9SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readersCheck if you run itEPSS 0.33%Aug 14, 2026
Sort