Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put The correct helper to u…Check if you run itEPSS 0.10%May 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL Apparently ICL may hang with…Check if you run itEPSS 0.11%May 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() sizeof(num) evaluates to sizeof(…Check if you run itEPSS 0.12%May 13, 2026
- High8.3A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data.Check if you run itEPSS 0.93%May 13, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 68.05%May 13, 2026
- High7.1Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST.Check if you run itEPSS 0.20%May 13, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module.Check if you run itEPSS 0.73%May 13, 2026
- High8.5When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system.Check if you run itEPSS 0.48%May 13, 2026
- Medium6.3When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame…Check if you run itEPSS 0.35%May 13, 2026
- High8.5An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP resulting in privilege escalation.Check if you run itEPSS 0.25%May 13, 2026
- High8.7When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM…Check if you run itEPSS 0.26%May 13, 2026
- High7.1A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with administrative access to escalate their privileges.Check if you run itEPSS 0.29%May 13, 2026
- High7.1When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management M…Check if you run itEPSS 0.18%May 13, 2026
- Medium6.9A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authenticated attacker with high privilege to overwrite, delete or corrupt arbitra…Check if you run itEPSS 0.89%May 13, 2026
- High8.6jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.Check if you run itEPSS 0.37%May 13, 2026
- High8.7When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traff…Check if you run itEPSS 0.26%May 13, 2026
- Medium6.7When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a highly privileged authenticated attacker to view se…Check if you run itEPSS 0.08%May 13, 2026
- High8.5A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configurati…Check if you run itEPSS 0.15%May 13, 2026
- High7.8protobufjs-cli is the command line add-on for protobuf.js.Check if you run itEPSS 0.13%May 13, 2026
- High8.8JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.Check if you run itEPSS 5.65%May 13, 2026
- Medium6.9A vulnerability exists in iControl SOAP where an authenticated attacker with the Resource Administrator or Administrator role can download sensitive files.Check if you run itEPSS 0.29%May 13, 2026
- Medium5.3An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names.Check if you run itEPSS 0.19%May 13, 2026
- High7.1Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics commands and in BIG-IP iControl REST.Check if you run itEPSS 0.20%May 13, 2026
- High8.7An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ Configuration utility.Check if you run itEPSS 0.51%May 13, 2026
- High8.7When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.26%May 13, 2026
Sort