Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium4.3ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure VulnerabilityZDI-26-557 · Zero Day InitiativeAug 12, 2026
Medium5.4ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery VulnerabilityCVE-2026-91131 · CVE.org · Zero Day InitiativeAug 12, 2026
Medium5.4ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery VulnerabilityCVE-2026-91129 · CVE.org · FIRST EPSS · Zero Day InitiativeEPSS 0.2%Aug 12, 2026
High7.8ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation VulnerabilityCVE-2026-62712 · microsoft · windows 10 1607 · CVE.org · FIRST EPSS · NIST NVD · Microsoft, WindowsEPSS 0.3%Aug 11, 2026
Critical9.8Progress LoadMaster Command Injection VulnerabilityCVE-2026-8037 · progress · connection manager for objectscale · CISA KEV · CVE.org · FIRST EPSS · ProgressKEVEPSS 77.4%Jun 4, 2026
High7.8ZDI-26-689: Linux Kernel SCTP Subsystem Race Condition Information Disclosure VulnerabilityCVE-2026-46227 · linux · linux kernel · CVE.org · FIRST EPSS · NIST NVD · LinuxEPSS 0.1%May 28, 2026
High7.5ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service VulnerabilityCVE-2026-4890 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.1%May 11, 2026
High7.1ZDI-26-682: Linux Kernel IPv6 Neighbour Discovery Uninitialized Memory Information Disclosure VulnerabilityCVE-2026-43040 · linux · linux kernel · CVE.org · FIRST EPSS · NIST NVD · LinuxEPSS 0.2%May 1, 2026
High8.8ZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation VulnerabilityCVE-2026-31719 · linux · linux kernel · CVE.org · FIRST EPSS · NIST NVD · LinuxEPSS 0.5%May 1, 2026
High7.8ZDI-26-692: Linux Kernel eMPIA USB Device Driver Race Condition Code Execution VulnerabilityCVE-2026-31583 · linux · linux kernel · CVE.org · FIRST EPSS · NIST NVD · LinuxEPSS 0.2%Apr 24, 2026
Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityCVE-2026-20148 · cisco · identity services engine · CVE.org · FIRST EPSS · NIST NVD · CiscoEPSS 6.5%Apr 15, 2026
Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityCVE-2026-20147 · cisco · identity services engine passive identity connector · CVE.org · FIRST EPSS · NIST NVD · CiscoEPSS 10.4%Apr 15, 2026
High7.8ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2026-4153 · gimp · gimp · CVE.org · FIRST EPSS · NIST NVDEPSS 0.6%Apr 11, 2026
High8.2ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation VulnerabilityCVE-2026-23413 · linux · linux kernel · CVE.org · FIRST EPSS · NIST NVD · LinuxEPSS 0.1%Apr 2, 2026
High8.8ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution VulnerabilityCVE-2026-27654 · f5 · nginx plus · CVE.org · FIRST EPSS · NIST NVD · F5, nginxEPSS 25.1%Mar 24, 2026