Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone.Check if you run itEPSS 0.21%Jul 22, 2026
- High7.5A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage.Check if you run itEPSS 0.54%Jul 22, 2026
- High7.5An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ proceCheck if you run itEPSS 0.43%Jul 22, 2026
- Medium6.8BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.Check if you run itEPSS 0.27%Jul 22, 2026
- High7.8traefik traefik Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.62%Jul 22, 2026
- High8.8Valkey is a distributed key-value database.Check if you run itEPSS 0.89%Jul 22, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.52%Jul 22, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197).Check if you run itEPSS 0.47%Jul 22, 2026
- UnknownOut of bounds read in GUICheck if you run itEPSS 0.53%Jul 22, 2026
- Medium6.5Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user.Check if you run itEPSS 0.42%Jul 21, 2026
- Medium6.6Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Check if you run itEPSS 0.36%Jul 21, 2026
- High7.6The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command siz…Check if you run itEPSS 0.16%Jul 21, 2026
- Medium5.5The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock_frequency / config->frequency without validating config->frequency.Check if you run itEPSS 0.14%Jul 21, 2026
- High8.1The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from an I2C bus master byte-by-byte in mctp_…Check if you run itEPSS 0.39%Jul 21, 2026
- Medium6.5The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy of the user-supplied k_poll_event[] via z_thread_malloc() and then…Check if you run itEPSS 0.14%Jul 21, 2026
- Medium6.5In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdog timer unconditio…Check if you run itEPSS 0.39%Jul 21, 2026
- Medium5.5The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, called LPUART_Deinit() at the start of mcux_lpuart…Check if you run itEPSS 0.14%Jul 21, 2026
- Highsharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591Check if you run itEPSS 0.11%Jul 21, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataCheck if you run itEPSS 0.39%Jul 21, 2026
- Medium6.5Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153).Check if you run itEPSS 0.42%Jul 21, 2026
- Medium6.5CVE-2026-63136 is listed by Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)..Check if you run itEPSS 0.42%Jul 21, 2026
- Unknownlibde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.43%Jul 21, 2026
- Unknownlibde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.43%Jul 21, 2026
- Medium6.5CVE-2026-56145 is listed by Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)..Check if you run itEPSS 0.47%Jul 21, 2026
- Medium6.5Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the…Check if you run itEPSS 0.32%Jul 21, 2026
Sort