Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIO_F_ACCESS_PLATFORM changes, cached v…Check if you run itEPSS 0.17%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentCheck if you run itEPSS 0.39%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCreCheck if you run itEPSS 0.37%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock [FALSE ALERTS] There is a bug rep…Check if you run itEPSS 0.20%Sep 24, 2026
- Critical9.1UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Pr…Check if you run itEPSS 0.34%Sep 21, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.42%Sep 21, 2026
- Unknowniguazio nuclio Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.52%Sep 21, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent memory cache_pos_decode(), cache_key_decode() and…Check if you run itEPSS 0.17%Sep 17, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max check_kfunc_args() detects a k…Check if you run itEPSS 0.13%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block group at btree_writepages() start btree_writepages() writ…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.3A flaw was found in environment-modules.Check if you run itEPSS 0.22%Sep 15, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext2_xattr_set2() had a construc…Check if you run itEPSS 0.58%Sep 11, 2026
- High8.5MOOS-IvP through 24.8.1 alogsplit Command Injection via Input PathnameCheck if you run itEPSS 0.47%Sep 3, 2026
- Critical9.8ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 1, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.40%Aug 31, 2026
- Critical9.8net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAGCheck if you run itEPSS 0.55%Aug 26, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allow…Check if you run itEPSS 0.40%Aug 24, 2026
- Medium6.9Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SC…Check if you run itEPSS 0.45%Aug 24, 2026
- Critical9.2RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private.Check if you run itEPSS 0.66%Aug 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight…Check if you run itEPSS 0.13%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags aft…Check if you run itEPSS 0.21%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of s…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obta…Check if you run itEPSS 0.18%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !p…Check if you run itEPSS 0.18%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip_vs_in_icmp() rebases an skb from the…Check if you run itEPSS 0.51%Aug 22, 2026