Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user.Check if you run itEPSS 0.42%Jul 21, 2026
- UnknownCVE Record: CVE-2026-42049Check if you run itEPSS 0.20%Jul 21, 2026
- UnknownCVE Record: CVE-2025-11698Check if you run itEPSS 0.43%Jul 21, 2026
- Medium6.6Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Check if you run itEPSS 0.36%Jul 21, 2026
- High7.6The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command siz…Check if you run itEPSS 0.16%Jul 21, 2026
- Medium5.5The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock_frequency / config->frequency without validating config->frequency.Check if you run itEPSS 0.14%Jul 21, 2026
- High8.1The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from an I2C bus master byte-by-byte in mctp_…Check if you run itEPSS 0.39%Jul 21, 2026
- Medium6.5The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy of the user-supplied k_poll_event[] via z_thread_malloc() and then…Check if you run itEPSS 0.14%Jul 21, 2026
- Medium6.5In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdog timer unconditio…Check if you run itEPSS 0.39%Jul 21, 2026
- Medium5.5The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, called LPUART_Deinit() at the start of mcux_lpuart…Check if you run itEPSS 0.14%Jul 21, 2026
- Highsharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591Check if you run itEPSS 0.11%Jul 21, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataCheck if you run itEPSS 0.39%Jul 21, 2026
- Medium6.5Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153).Check if you run itEPSS 0.42%Jul 21, 2026
- Medium6.5CVE-2026-63136 is listed by Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)..Check if you run itEPSS 0.42%Jul 21, 2026
- Unknownlibde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.43%Jul 21, 2026
- Unknownlibde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.43%Jul 21, 2026
- UnknownCVE Record: CVE-2026-21764Check if you run itEPSS 0.22%Jul 21, 2026
- UnknownCVE Record: CVE-2026-44175Check if you run itEPSS 0.43%Jul 21, 2026
- UnknownCVE Record: CVE-2026-45533Check if you run itEPSS 0.46%Jul 21, 2026
- UnknownCVE Record: CVE-2026-50370Check if you run itEPSS 0.50%Jul 21, 2026
- UnknownCVE Record: CVE-2026-15598Check if you run itEPSS 0.42%Jul 21, 2026
- UnknownCVE Record: CVE-2026-62230Check if you run itEPSS 0.38%Jul 21, 2026
- UnknownCVE Record: CVE-2026-9820Check if you run itEPSS 0.26%Jul 21, 2026
- UnknownCVE Record: CVE-2026-48310Check if you run itEPSS 1.05%Jul 21, 2026
- UnknownCVE Record: CVE-2026-15624Check if you run itEPSS 0.37%Jul 21, 2026
Sort