Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file,…Check if you run itEPSS 0.14%Jul 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl write buffer proc_sys_call_handler() allocates its temporary…Check if you run itEPSS 0.15%Jul 19, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_dir_entry() In exfat_find_dir_entry(), the buffer…Check if you run itEPSS 0.53%Jul 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a race condition with OMAPFB_SETU…Check if you run itEPSS 0.14%Jul 19, 2026
- Unknownblock: Avoid mounting the bdev pseudo-filesystem in userspaceCheck if you run itEPSS 0.21%Jul 19, 2026
- UnknownKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT pathCheck if you run itEPSS 0.14%Jul 19, 2026
- High7.8i2c: core: fix adapter registration raceCheck if you run itEPSS 0.14%Jul 19, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 3.52%Jul 19, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.43%Jul 18, 2026
- High7.1Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG functionCheck if you run itEPSS 0.12%Jul 17, 2026
- High7.1A flaw was found in xdgmime.Check if you run itEPSS 0.28%Jul 17, 2026
- None0.0oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable CodeOpen the advisoryJul 17, 2026
- Critical9.8IBM Langflow Code Injection VulnerabilityPatch nowKEVEPSS 28.66%Jul 17, 2026
- Medium6.5Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owne…Check if you run itEPSS 0.42%Jul 17, 2026
- Medium6.5Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash…Check if you run itEPSS 0.42%Jul 17, 2026
- Critical9.3Sangoma Switchvox SQL Injection VulnerabilityPatch nowKEVEPSS 18.98%Jul 17, 2026
- Critical9.8WordPress Core Interpretation Conflict VulnerabilityPatch nowKEVEPSS 10.65%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityPatch nowKEVEPSS 5.32%Jul 17, 2026
- Medium5.4CVE-2026-62826 is listed by inventory_critical.Check if you run itEPSS 0.58%Jul 16, 2026
- High7.3cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentialsCheck if you run itEPSS 0.11%Jul 16, 2026
- UnknownCGA-vq85-9r7j-979pOpen the advisoryJul 16, 2026
- UnknownCVE-2025-43892 is listed by Buffer overread in authd and wad daemon.Check if you run itEPSS 0.38%Jul 16, 2026
- High7.1CGA-xr4w-f4q6-c8x6Open the advisoryJul 15, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012Check if you run itEPSS 0.23%Jul 15, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011Check if you run itEPSS 0.21%Jul 15, 2026
Sort