Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value of usbd_ep_enqueue() in its ethernet transmit callback cdc_ncm_send().Check if you run itEPSS 0.20%Jun 29, 2026
- Critical9.1Apache Tomcat util accepted misconfigured CRLsCheck if you run itEPSS 0.59%Jun 29, 2026
- High8.8A use-after-free issue was addressed with improved memory management.Check if you run itEPSS 1.26%Jun 29, 2026
- Medium6.2A flaw was found in p11-kit.Check if you run itEPSS 0.15%Jun 29, 2026
- High7.3A flaw was found in libtiff.Check if you run itEPSS 0.43%Jun 29, 2026
- High7.5ollyo helix3 Improper Access ControlPatch nowKEVEPSS 0.99%Jun 29, 2026
- Medium5.5agp/amd64: Fix broken error propagation in agp_amd64_probe()Check if you run itEPSS 0.13%Jun 29, 2026
- High7.4Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) passes a pointer to a stack-allocated state object (struct getaddrinfo_state a…Check if you run itEPSS 0.45%Jun 28, 2026
- Low3.1The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PIC32CM-JH SoC family, contains an out-of-bounds write in its asynchronous (DMA…Check if you run itEPSS 0.22%Jun 28, 2026
- Medium6.5The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications.Check if you run itEPSS 0.30%Jun 28, 2026
- Unknownlibssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup paCheck if you run itEPSS 0.28%Jun 28, 2026
- High7.5libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_atCheck if you run itEPSS 0.44%Jun 28, 2026
- High7.8Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using…Check if you run itEPSS 0.16%Jun 28, 2026
- UnknownGogs Gogs Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.93%Jun 28, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.58%Jun 27, 2026
- Critical10.0Joomlack Page Builder Improper Access Control VulnerabilityPatch nowKEVEPSS 30.87%Jun 27, 2026
- Critical10.0Kestra kestra Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.30%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allo…Check if you run itEPSS 0.16%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind syzbot reported a kernel BUG tr…Check if you run itEPSS 0.16%Jun 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED [Why] dcn32_…Check if you run itEPSS 0.12%Jun 26, 2026
- Medium5.5mailbox: add sanity check for channel arrayCheck if you run itEPSS 0.13%Jun 26, 2026
- High7.5Podman is a tool for managing OCI containers and pods.Check if you run itEPSS 0.44%Jun 26, 2026
- High8.5Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.Check if you run itEPSS 0.58%Jun 26, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions.Check if you run itEPSS 0.25%Jun 26, 2026
- High8.7Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks.Check if you run itEPSS 0.54%Jun 26, 2026
Sort