Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() cifs_posix_to_fattr() ignores…Check if you run itEPSS 0.21%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends a two-bytCheck if you run itEPSS 0.11%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation The poll_msec sysfs store file uses simpCheck if you run itEPSS 0.11%Sep 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in resp_worker() Although 'commit 2feec5ae5df7 ("accel/qaic: HaCheck if you run itEPSS 0.12%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is exceeded When pending disconnecting queues exceed the backlogCheck if you run itEPSS 0.11%Sep 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan nvme_scan_ns_list() drops the stale namespaces in each gCheck if you run itEPSS 0.61%Sep 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Fix afs_lookup_server() to not free an existCheck if you run itEPSS 0.16%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure.Check if you run itEPSS 0.11%Sep 25, 2026
- Medium6.4The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cjtoolbox shortcode in all versions up to, and includin…Check if you run itEPSS 0.15%Sep 25, 2026
- Medium6.5Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path to bypass the locatiCheck if you run itEPSS 0.55%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentCheck if you run itEPSS 0.54%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCreCheck if you run itEPSS 0.44%Sep 25, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Sep 25, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.58%Sep 25, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Sep 25, 2026
- Unknownelementor Website Builder Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.19%Sep 25, 2026
- UnknownRejected reason: This CVE is a duplicate of another CVE.Open the advisorySep 24, 2026
- UnknownCVE-2026-76447 is listed by Cisco Identity Services Engine Authentication Bypass Vulnerabilities.Check if you run itEPSS 0.38%Sep 24, 2026
- UnknownCVE-2026-76446 is listed by Cisco Identity Services Engine Authentication Bypass Vulnerabilities.Check if you run itEPSS 0.38%Sep 24, 2026
- UnknownCVE-2026-76444 is listed by Cisco Identity Services Engine Authentication Bypass Vulnerabilities.Check if you run itEPSS 0.35%Sep 24, 2026
- UnknownCVE-2026-76439 is listed by Cisco Identity Services Engine Authentication Bypass Vulnerabilities.Check if you run itEPSS 0.39%Sep 24, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the cu…Check if you run itEPSS 0.35%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 The changes introduced to hand…Check if you run itEPSS 0.19%Sep 24, 2026
- High7.4In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xive_init_ipis() fails (e.g.Check if you run itEPSS 0.14%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock [FALSE ALERTS] There is a bug rep…Check if you run itEPSS 0.20%Sep 24, 2026
Sort