Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8A flaw was found in DPDK lib/vhost vhost-crypto.CVE-2026-86848 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.CVE-2026-86847 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.CVE-2026-86845 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
High8.2A flaw was found in DPDK lib/vhost.CVE-2026-86565 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
High7.8A flaw was found in DPDK lib/vhost.CVE-2026-86563 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
High7.8A flaw was found in DPDK lib/vhost.CVE-2026-86562 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
Medium6.5A flaw was found in DPDK lib/vhost.CVE-2026-86561 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
High8.0util-linux is a random collection of Linux utilities.CVE-2026-53615 · CVE.org · NIST NVD · OSV.dev · debian, linuxOct 14, 2026
High7.0util-linux is a random collection of Linux utilities.CVE-2026-53614 · CVE.org · NIST NVD · OSV.dev · debian, linuxOct 14, 2026
Medium6.4A flaw was found in the DPDK vhost library.CVE-2026-93683 · Red Hat · Fast Datapath for RHEL 10 · CVE.org · NIST NVD · OSV.dev · debian, redhatOct 14, 2026
High7.2The fix for CVE-2026-12996 was incomplete.CVE-2026-84471 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
High7.0util-linux is a random collection of Linux utilities.CVE-2026-53613 · CVE.org · NIST NVD · OSV.dev · debian, linuxOct 14, 2026
Medium5.9Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_…CVE-2026-107348 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
High8.8Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user th…CVE-2026-107350 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
High7.5An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service.CVE-2026-107349 · CVE.org · NIST NVD · OSV.dev · debianOct 14, 2026
High7.3CVE-2026-110237CVE-2026-110237 · CVE.org · FIRST EPSS · OSV.dev · debianEPSS 0.1%Oct 13, 2026
High7.0KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into theCVE-2026-110236 · CVE.org · FIRST EPSS · OSV.dev · debianEPSS 1.0%Oct 13, 2026
Low2.7Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbCVE-2026-110225 · CVE.org · FIRST EPSS · OSV.dev · debianEPSS 0.3%Oct 13, 2026
UnknownA vulnerability was found in libsndfile up to 1.2.2.CVE-2026-109828 · CVE.org · FIRST EPSS · OSV.dev · debianEPSS 0.4%Oct 13, 2026
High7.1An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disc…CVE-2026-88964 · CVE.org · FIRST EPSS · NIST NVD · debianEPSS 0.5%Oct 13, 2026
High7.6OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldCVE-2026-84790 · CVE.org · FIRST EPSS · NIST NVD · debianEPSS 0.2%Oct 13, 2026
UnknownImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow.CVE-2026-109964 · CVE.org · FIRST EPSS · OSV.dev · debianEPSS 0.4%Oct 13, 2026
High7.0NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths.CVE-2026-109956 · CVE.org · FIRST EPSS · OSV.dev · debianEPSS 0.3%Oct 13, 2026
Medium6.0The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol set in nego_process_negotiat…CVE-2026-109952 · CVE.org · FIRST EPSS · NIST NVD · debianEPSS 0.3%Oct 13, 2026
High7.1FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width reaches an assertion and aborts the client.CVE-2026-109946 · CVE.org · FIRST EPSS · NIST NVD · debianEPSS 0.3%Oct 13, 2026