Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- HighIn the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy all but the termi…Check if you run itEPSS 0.21%Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot reported a crash in qd…Check if you run itEPSS 0.21%Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like HMC FTP boot or QE…Check if you run itEPSS 0.21%Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump, which passes the re-…Check if you run itEPSS 0.21%Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache entries for zapped classes syzbot reported a lockdep splat hittingCheck if you run itEPSS 0.21%Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.Check if you run itEPSS 0.21%Oct 14, 2026
- Mediumdrm/xe: Guard page-fault worker with runtime PM checkCheck if you run itEPSS 0.20%Oct 14, 2026
- Highexec: do_close_on_exec() before taking exec_update_lockCheck if you run itEPSS 0.22%Oct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The return codes from skcipher_walk…Check if you run itEPSS 0.21%Oct 14, 2026
- Highscsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slotCheck if you run itEPSS 0.21%Oct 14, 2026
- Critical9.8Cisco Secure Email Gateway Relative Path Traversal VulnerabilityPatch nowKEVEPSS 1.57%Oct 14, 2026
- High8.2Metalama allows local code execution through DLL planting in shared temporary directoriesOpen the advisoryOct 14, 2026
- Low3.1Apprise forwards configured auth headers across cross-origin HTTP redirectsCheck if you run itEPSS 0.32%Oct 14, 2026
- High8.5JVN#88474777: SiteGuard Server Edition vulnerable to OS command injectionPatch nowKEVEPSS 0.66%Oct 14, 2026
- Medium5.3External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin".Patch nowKEVEPSS 0.22%Oct 14, 2026
- UnknownImportant: kernel-rt security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- UnknownImportant: kernel security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- UnknownModerate: environment-modules security updateOpen the advisoryOct 14, 2026
- UnknownImportant: hplip security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- UnknownImportant: hplip security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- UnknownMalicious code in crelic-bqwheel-52f66a3f1d (PyPI)Open the advisoryOct 13, 2026
- Medium5.4blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.21%Oct 13, 2026
- UnknownCisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass VulnerabilityCheck if you run itEPSS 0.16%Oct 13, 2026
- High7.8Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.34%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution VulnerabilityCheck if you run itEPSS 0.78%Oct 13, 2026