Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.38%Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.48%Apr 24, 2026
- High7.4Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.92%Apr 24, 2026
- High8.3rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.28%Apr 24, 2026
- Medium5.4A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks…Check if you run itEPSS 0.34%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key reference count leak from call->key When creating a client call in rxrpc_alloc_clien…Check if you run itEPSS 0.16%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Only put the call ref if one was acquired rxrpc_input_packet_on_conn() can process a to-clie…Check if you run itEPSS 0.63%Apr 24, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds check uses (u8 *)ea + nlen + 1…Check if you run itEPSS 0.17%Apr 24, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUS_STOPPED_ON_S…Check if you run itEPSS 0.39%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNameLength from the cli…Check if you run itEPSS 0.58%Apr 24, 2026
- High8.6In the Linux kernel, the following vulnerability has been resolved: ksmbd: require 3 sub-authorities before reading sub_auth[2] parse_dacl() compares each ACE SID agai…Check if you run itEPSS 0.54%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc The kernel ASN.1 BER decoder c…Check if you run itEPSS 0.14%Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() smbd_send_batch…Check if you run itEPSS 0.67%Apr 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SU…Check if you run itEPSS 0.31%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vfio/xe: Reorganize the init to decouple migration from reset Attempting to issue reset on VF devic…Check if you run itEPSS 0.16%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock during netdev reset with active connections Resolve deadlock that occurs w…Check if you run itEPSS 0.13%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register The call to mipi_dsi_ho…Check if you run itEPSS 0.16%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL deref in bond_debug_rlb_hash_show rlb_clear_slave intentionally keeps RLB ha…Check if you run itEPSS 0.17%Apr 24, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv cre…Check if you run itEPSS 0.11%Apr 24, 2026
- Low3.8An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Balance componentCheck if you run itEPSS 0.57%Apr 24, 2026
- High8.6A flaw was found in OVN (Open Virtual Network).Check if you run itEPSS 0.88%Apr 24, 2026
- High8.5A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending ProvideSignalRequest.Check if you run itEPSS 0.35%Apr 24, 2026
- Medium4.3The Taqnix plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.21%Apr 24, 2026
- High7.5basic-ftp is an FTP client for Node.js.Check if you run itEPSS 0.49%Apr 24, 2026
- Medium5.9MailKit is a cross-platform mail client library built on top of MimeKit.Check if you run itEPSS 0.33%Apr 24, 2026