Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownCisco Identity Services Engine Cross-Site Scripting VulnerabilityCheck if you run itEPSS 0.19%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmem_invalida…Check if you run itEPSS 0.21%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho_preserved_memory_reserve() kho_preserved_memory_reserve() calculat…Check if you run itEPSS 0.21%Sep 11, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc_xprt_put to free listener on create failure svc_rdma_create() calls kfree(cma_xprt…Check if you run itEPSS 0.22%Sep 11, 2026
- Unknownvarktech pricing_deals_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.01%Sep 10, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tipc: avoid busy looping in tipc_exit_net() Blamed commit introduced a busy-wait loop in tipc_exit_…Check if you run itEPSS 0.21%Sep 4, 2026
- Medium6.8MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory.Check if you run itEPSS 0.23%Sep 3, 2026
- Critical9.3MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime.Check if you run itEPSS 0.77%Sep 3, 2026
- Unknownpixelite events_manager Improper Privilege ManagementPatch nowKEVEPSS 0.50%Aug 31, 2026
- Medium5.4A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter.Check if you run itEPSS 0.24%Aug 27, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcrypt_msgtype6_send_ep11_cpr…Check if you run itEPSS 0.18%Aug 26, 2026
- Medium6.9A vulnerability was determined in jQWidgets up to 24.0.1.Check if you run itEPSS 0.58%Aug 24, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.37%Aug 24, 2026
- Critical9.8DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float.Check if you run itEPSS 0.67%Aug 23, 2026
- Low3.7Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey.Check if you run itEPSS 0.41%Aug 23, 2026
- Medium5.3Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line.Check if you run itEPSS 0.42%Aug 23, 2026
- Critical9.3In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_keys() We have seen in our CI the following KASAN mes…Check if you run itEPSS 0.14%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of s…Check if you run itEPSS 0.17%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() If cxacru_cm() encounters an error…Check if you run itEPSS 0.18%Aug 22, 2026
- Critical9.1Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret.Check if you run itEPSS 0.50%Aug 22, 2026
- Critical9.1Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them.Check if you run itEPSS 0.50%Aug 22, 2026
- High7.5Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys.Check if you run itEPSS 0.61%Aug 22, 2026
- Low2.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.38%Aug 21, 2026
- High8.7A privilege escalation flaw was found in FreeIPA.Check if you run itEPSS 0.57%Aug 20, 2026