Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceCheck if you run itEPSS 0.90%Sep 7, 2026
- Critical9.8A flaw was found in FreeIPA.Check if you run itEPSS 1.21%Sep 7, 2026
- Medium6.5A flaw was found in odh-dashboard in Red Hat OpenShift AI.Check if you run itEPSS 0.41%Sep 7, 2026
- Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 3.95%Sep 7, 2026
- Highmonstaftp monsta_ftp Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.51%Sep 7, 2026
- UnknownSecurity exception in org.apache.lucene.util.ArrayUtil.copyOfSubArrayOpen the advisorySep 6, 2026
- UnknownCVE-2026-76161Open the advisorySep 5, 2026
- UnknownCVE-2026-76160Open the advisorySep 5, 2026
- Critical10.0N-able N-central Static Code Injection VulnerabilityPatch nowKEVEPSS 15.38%Sep 5, 2026
- High7.5libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iteratCheck if you run itEPSS 0.44%Sep 5, 2026
- UnknownCVE-2026-6554 affecting package libpcap for versions less than 1.10.7-1Open the advisorySep 5, 2026
- Critical9.8CGA-xc8p-887q-9hxgOpen the advisorySep 5, 2026
- High7.8CGA-xj36-hhvp-5q29Open the advisorySep 5, 2026
- High8.2PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though aCheck if you run itEPSS 0.43%Sep 5, 2026
- Critical9.2MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityPatch nowKEVEPSS 6.39%Sep 5, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 2.28%Sep 5, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.56%Sep 5, 2026
- Critical9.2MikroTik RouterOS Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 8.94%Sep 5, 2026
- UnknownCVE-2026-86091 affecting package ntopng for versions less than 5.2.1-7Open the advisorySep 4, 2026
- UnknownCVE-2026-86090 affecting package ntopng for versions less than 5.2.1-7Open the advisorySep 4, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and tx_gen ordering This patch is a follow-up to commit cf070Check if you run itEPSS 0.18%Sep 4, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for future release The DMA API requires that dma_free_attrs receive…Check if you run itEPSS 0.21%Sep 4, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tipc: avoid busy looping in tipc_exit_net() Blamed commit introduced a busy-wait loop in tipc_exit_…Check if you run itEPSS 0.21%Sep 4, 2026
- Unknowndrm/vmwgfx: use check_add_overflow for shader size+offset boundCheck if you run itEPSS 0.17%Sep 4, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_…Check if you run itEPSS 0.21%Sep 4, 2026
Sort