Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()Check if you run itEPSS 0.10%Jul 1, 2026
- Medium5.5ASoC: wm_adsp: Fix NULL dereference when removing firmware controlsCheck if you run itEPSS 0.12%Jul 1, 2026
- Medium5.5netfilter: nf_conntrack: destroy stale expectfn expectations on unregisterCheck if you run itEPSS 0.12%Jul 1, 2026
- Medium5.5net: bonding: fix NULL pointer dereference in bond_do_ioctl()Check if you run itEPSS 0.12%Jul 1, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.86%Jul 1, 2026
- UnknownQuantumCloud wpbot Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.89%Jul 1, 2026
- Critical9.9Langflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.55%Jun 30, 2026
- Critical10.0Metasploit Wrap Up: Langflow, MongoDB, and MoreCheck if you run itEPSS 2.32%Jun 30, 2026
- High8.1The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length field of a framed ISO PDU start segment.Check if you run itEPSS 0.33%Jun 30, 2026
- Medium5.9The asynchronous SNTP client in Zephyr (subsys/net/lib/sntp/sntp.c, sntp_close_async) closed the UDP socket file descriptor directly from the calling thread immediatel…Check if you run itEPSS 0.38%Jun 30, 2026
- Low3.1A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a simultaneous bidirectional session disconnect.Check if you run itEPSS 0.17%Jun 30, 2026
- High8.1The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of eac…Check if you run itEPSS 0.42%Jun 30, 2026
- High7.4Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TT…Check if you run itEPSS 0.41%Jun 30, 2026
- Medium5.3A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up to 0.12.16, 0.13.0 up to 0.13.12, 0.14.0 up to 0.14.7 and 0.15.0 up…Check if you run itEPSS 0.49%Jun 30, 2026
- High8.8Citrix NetScaler ADC and NetScaler Gateway Out-of-bounds ReadPatch nowKEVEPSS 0.50%Jun 30, 2026
- High7.5A flaw was found in GLib.Check if you run itEPSS 0.84%Jun 30, 2026
- High8.6A flaw was found in GLib.Check if you run itEPSS 0.56%Jun 30, 2026
- High8.2A flaw was found in GLib.Check if you run itEPSS 0.50%Jun 30, 2026
- High8.2A flaw was found in GLib.Check if you run itEPSS 0.49%Jun 30, 2026
- High7.5A flaw was found in GLib.Check if you run itEPSS 0.47%Jun 30, 2026
- High8.2A flaw was found in GLib.Check if you run itEPSS 0.49%Jun 30, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.49%Jun 30, 2026
- Critical9.1Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"Check if you run itEPSS 0.55%Jun 30, 2026
- Critical10.0Adobe ColdFusion Path Traversal VulnerabilityPatch nowKEVEPSS 42.39%Jun 30, 2026
- High7.5A double free issue has been identified in libarchive's RAR5 reader.Check if you run itEPSS 0.79%Jun 30, 2026
Sort