Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware() copies patch_length - 4 byt…Check if you run itEPSS 0.17%Aug 15, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 tra…Check if you run itEPSS 0.71%Aug 15, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211_gen_new_ie() copies ML probe response…Check if you run itEPSS 0.34%Aug 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame layout before RX Extension frames only have the extension…Check if you run itEPSS 0.36%Aug 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in fwnode_init() If a firmware no…Check if you run itEPSS 0.18%Aug 15, 2026
- Medium4.3The ECS WordPress plugin before 4.3.13 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who…Check if you run itEPSS 0.25%Aug 15, 2026
- High7.4vhost: fix vhost_get_avail_idx for a non empty ringCheck if you run itEPSS 0.25%Aug 15, 2026
- Critical9.8ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()Check if you run itEPSS 0.72%Aug 15, 2026
- Critical9.4cifs: validate DFS referral string offsetsCheck if you run itEPSS 0.59%Aug 15, 2026
- Critical9.3KVM: arm64: vgic: Check the interrupt is still ours before migrating itCheck if you run itEPSS 0.18%Aug 15, 2026
- High7.8ocfs2: avoid moving extents to occupied clustersCheck if you run itEPSS 0.17%Aug 15, 2026
- High7.8cpu: hotplug: Bound hotplug states sysfs outputCheck if you run itEPSS 0.18%Aug 15, 2026
- Medium4.9The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all vers…Check if you run itEPSS 0.58%Aug 15, 2026
- High7.2The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in al…Check if you run itEPSS 0.42%Aug 15, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationPatch nowKEVEPSS 2.30%Aug 15, 2026
- Unknowncozmoslabs profile_builder Incorrect Type Conversion or CastPatch nowKEVEPSS 3.90%Aug 15, 2026
- Medium6.3In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.Check if you run itEPSS 0.30%Aug 14, 2026
- Medium6.5A flaw was found in Samba's CTDB, the clustered database service used by Samba.Check if you run itEPSS 0.34%Aug 14, 2026
- UnknownPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.Check if you run itEPSS 0.33%Aug 14, 2026
- Medium6.9SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbiddenCheck if you run itEPSS 0.34%Aug 14, 2026
- Medium6.9SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readersCheck if you run itEPSS 0.33%Aug 14, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.85%Aug 14, 2026
- UnknownBoldGrid w3_total_cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Aug 14, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%Aug 14, 2026
- UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsCheck if you run itEPSS 0.57%Aug 13, 2026
Sort