Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3A flaw was found in libtiff.Check if you run itEPSS 0.43%Jun 29, 2026
- High7.5ollyo helix3 Improper Access ControlPatch nowKEVEPSS 0.99%Jun 29, 2026
- Medium5.5agp/amd64: Fix broken error propagation in agp_amd64_probe()Check if you run itEPSS 0.13%Jun 29, 2026
- High7.4Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) passes a pointer to a stack-allocated state object (struct getaddrinfo_state a…Check if you run itEPSS 0.45%Jun 28, 2026
- Low3.1The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PIC32CM-JH SoC family, contains an out-of-bounds write in its asynchronous (DMA…Check if you run itEPSS 0.22%Jun 28, 2026
- Medium6.5The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications.Check if you run itEPSS 0.30%Jun 28, 2026
- Unknownlibssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup paCheck if you run itEPSS 0.28%Jun 28, 2026
- High7.5libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_atCheck if you run itEPSS 0.44%Jun 28, 2026
- High7.8Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using…Check if you run itEPSS 0.16%Jun 28, 2026
- UnknownGogs Gogs Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.93%Jun 28, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.58%Jun 27, 2026
- Critical10.0Joomlack Page Builder Improper Access Control VulnerabilityPatch nowKEVEPSS 30.87%Jun 27, 2026
- Critical10.0Kestra kestra Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.30%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allo…Check if you run itEPSS 0.16%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind syzbot reported a kernel BUG tr…Check if you run itEPSS 0.16%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED [Why] dcn32_…Check if you run itEPSS 0.12%Jun 26, 2026
- Medium5.5mailbox: add sanity check for channel arrayCheck if you run itEPSS 0.13%Jun 26, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityPatch nowKEVEPSS 2.10%Jun 26, 2026
- UnknownGogs Gogs Relative Path TraversalPatch nowKEVEPSS 1.11%Jun 26, 2026
- Critical9.3FlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 4.36%Jun 25, 2026
- High8.7FlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 1.57%Jun 25, 2026
- High7.5Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming packets by sending a small number of maliciously fragmented IPv6 packets.Check if you run itEPSS 0.49%Jun 25, 2026
- High8.1A flaw was found in Keycloak Policy Enforcer.Check if you run itEPSS 0.65%Jun 25, 2026
- Medium5.3Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashes or dy…Check if you run itEPSS 0.60%Jun 25, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When parsing fails after we've matched th…Check if you run itEPSS 0.52%Jun 25, 2026
Sort