Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection, allowing unauthenticated attackers to access t…Check if you run itEPSS 0.38%Jun 17, 2026
- Critical9.2libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field.Check if you run itEPSS 3.88%Jun 17, 2026
- UnknownCVE-2026-55200 affecting package libssh2 for versions less than 1.11.1-3Open the advisoryJun 17, 2026
- UnknownDrupal core - Moderately critical - Improper validation - SA-CORE-2026-009Check if you run itEPSS 0.27%Jun 17, 2026
- UnknownDrupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008Check if you run itEPSS 0.22%Jun 17, 2026
- UnknownDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007Check if you run itEPSS 0.34%Jun 17, 2026
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2026-006Check if you run itEPSS 0.35%Jun 17, 2026
- UnknownDrupal core - Critical - PHP object injection - SA-CORE-2026-005Check if you run itEPSS 0.35%Jun 17, 2026
- Critical9.3PTC Windchill and FlexPLM Improper Input Validation VulnerabilityPatch nowKEVEPSS 46.05%Jun 17, 2026
- High7.1Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an out-of-bounds write.Check if you run itEPSS 0.28%Jun 17, 2026
- UnknownCVE-2026-8317Open the advisoryJun 17, 2026
- High8.1Authentication Bypass Using an Alternate Path or Channel vulnerability in Booknetic Booknetic booknetic allows Authentication Abuse.This issue affects Booknetic: from…Check if you run itEPSS 0.34%Jun 17, 2026
- High7.0util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.15%Jun 17, 2026
- UnknownRevisiting OMI: Analysis of CVE-2022-29149, a privilege escalation vulnerability in Azure OMI | Wiz BlogCheck if you run itEPSS 0.92%Jun 17, 2026
- UnknownCVE-2023-25610 a critical RCE vulnerability in FortiOS: everything you need to know | Wiz BlogCheck this weekEPSS 18.33%Jun 17, 2026
- UnknownStack-use-after-scope in StreamReader_CApi::wait_for_file_sizeOpen the advisoryJun 17, 2026
- High7.1Zephyr's IPv6 Neighbor Discovery send paths (net_ipv6_send_na, net_ipv6_send_ns, net_ipv6_send_rs in subsys/net/ip/ipv6_nbr.c) updated the per-interface ICMP-sent stat…Check if you run itEPSS 0.37%Jun 16, 2026
- Medium4.8In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c builds an echo-reply packet (reply), hands it to net_try_send_data(), and then, o…Check if you run itEPSS 0.23%Jun 16, 2026
- High7.5subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has been handed to net_try_send_data().Check if you run itEPSS 0.35%Jun 16, 2026
- High7.1subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after net_send_data(pkt) returned successfully.Check if you run itEPSS 0.30%Jun 16, 2026
- Low3.7In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface back out of the packet via net_pkt_iface(pkt) after the packet had…Check if you run itEPSS 0.31%Jun 16, 2026
- High7.5Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.29%Jun 16, 2026
- High7.5Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.25%Jun 16, 2026
- High7.5Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.25%Jun 16, 2026
- High7.5Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.25%Jun 16, 2026
Sort