Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownmedia: qcom: iris: fix runtime PM reference leaksOpen the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported.Open the advisoryOct 18, 2026
- UnknownEDAC/altera: Use parent device for devres in altr_portb_setup()Open the advisoryOct 18, 2026
- Unknownsysctl: Check range in proc_dointvec_ms_jiffies_minmaxOpen the advisoryOct 18, 2026
- UnknownKVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failureOpen the advisoryOct 18, 2026
- Low2.1A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.Open the advisoryOct 18, 2026
- Medium6.0libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by se…Open the advisoryOct 18, 2026
- Medium6.0lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS re…Open the advisoryOct 18, 2026
- Medium5.3librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that fo…Open the advisoryOct 18, 2026
- Medium6.1librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures.Open the advisoryOct 18, 2026
- Medium6.9libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer.Open the advisoryOct 18, 2026
- Medium6.8VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT tit…Open the advisoryOct 18, 2026
- Medium6.8libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array…Open the advisoryOct 18, 2026
- Medium6.8wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying cr…Open the advisoryOct 18, 2026
- Medium6.8wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run count.Open the advisoryOct 18, 2026
- Medium6.8Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom o…Open the advisoryOct 18, 2026
- Medium6.8Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unval…Open the advisoryOct 18, 2026
- Medium6.9libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, al…Open the advisoryOct 18, 2026
- High8.3Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backsla…Open the advisoryOct 18, 2026
- Low2.3Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performG…Open the advisoryOct 18, 2026
- Medium6.7Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside the install direc…Open the advisoryOct 18, 2026
- Medium6.9libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafte…Open the advisoryOct 18, 2026
- Medium5.3OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authenticated project members to act on clusters outside their scope by e…Open the advisoryOct 18, 2026
- Medium6.8OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB.Open the advisoryOct 18, 2026
- Low2.1A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.Open the advisoryOct 18, 2026