Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: stmmac: clear stale buf->page after recycling on skb build failure In stmmac_rx(), when napi_b…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in nvif_vmm_dtor On failure, nouveau_cli_init() calls nouveau_cli_fini…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: ipconfig: bound DHCP option construction ic_dhcp_init_options() appends the hostname (option 1…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2_parse_contexts() validates the complete cr…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open() accounts a successful CR…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open_cached_dir() sends CREATE and QUERY_INFO a…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non-regular inodes An O_CREAT open can find an existing symli…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compound_send_recv() waits for respons…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fai…Open the advisoryOct 18, 2026
- UnknownCVE-2026-98523: drm/client: fix restore of partially initialized clientOpen the advisoryOct 18, 2026
- Medium6.0libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by se…Open the advisoryOct 18, 2026
- Medium5.3librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that fo…Open the advisoryOct 18, 2026
- Low2.3Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performG…Open the advisoryOct 18, 2026
- Critical9.2WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions throCheck if you run itEPSS 0.00%Oct 18, 2026
- High7.1The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on…Open the advisoryOct 18, 2026
- Low2.9A flaw has been found in OpenCATS 0.10.0.Open the advisoryOct 18, 2026
- UnknownMalicious code in leakdeep (PyPI)Open the advisoryOct 18, 2026
- Medium5.1phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users with FAQ_EDIT permission to bypass saniti…Open the advisoryOct 17, 2026
- High7.2FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte imageOpen the advisoryOct 17, 2026
- Medium6.3Coder before 2.34.7 IP Spoofing via X-Forwarded-For HeaderOpen the advisoryOct 17, 2026
- UnknownMalicious code in ukraine69 (PyPI)Open the advisoryOct 17, 2026
- Medium6.5The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthen…Check if you run itEPSS 0.14%Oct 17, 2026
- Critical9.8LMCache: Remote code execution via unsafe deserialization in multiprocess mode transportCheck if you run itEPSS 0.48%Oct 16, 2026
- High8.0@remix-run/router: react-router: React Router vulnerable to XSS via Open RedirectsCheck if you run itEPSS 0.87%Oct 16, 2026
- High7.4crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumptionCheck if you run itEPSS 0.92%Oct 16, 2026
2,663 records · page 1 of 107
PreviousNext