Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XDP socket is attached, the virtnet_rx_resize shoul…Check if you run itEPSS 0.16%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but th…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: vxlan: fix reading neigh ha Currently arp/neigh_reduce read neigh ha directly which can lead to par…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier *_change…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: fuse: Fix the condition to enable over-io-uring The existing condition in fuse_uring_cmd() is there…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Since commit b66774b48dd9 ("Bluetooth:…Check if you run itEPSS 0.18%Sep 17, 2026
- High8.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs.Check if you run itEPSS 0.35%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hci_conn when a second LE connect is rejected create_le_conn_complete() d…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size mana_gd_query_max_resources() sizes gc-…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() rvu_mbox_init() is called sepa…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip double clone set expressions on element insert Both the dynset and newse…Check if you run itEPSS 0.21%Sep 17, 2026
- Critical9.8NFSv4.1: zero referring call lists before decodingCheck if you run itEPSS 0.64%Sep 17, 2026
- Low3.3In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.Check if you run itEPSS 0.16%Sep 11, 2026
- High7.8In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context.Check if you run itEPSS 0.13%Sep 11, 2026
- Medium6.5PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.Check if you run itEPSS 0.27%Sep 11, 2026
- Medium6.5PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.Check if you run itEPSS 0.25%Sep 11, 2026
- High7.4PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.Check if you run itEPSS 0.28%Sep 11, 2026
- Medium5.9PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.Check if you run itEPSS 0.29%Sep 11, 2026
- High8.8ZDI-26-623: Linux Kernel IPv6 Multicast Routing Use-After-Free Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.17%Sep 9, 2026
- High8.2PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though aCheck if you run itEPSS 0.39%Sep 5, 2026
- Medium6.5Hono: Incomplete fix for CVE-2026-39408: still writes files outside the output directoryOpen the advisorySep 1, 2026
- Medium5.3Hono: Unbounded dot-notation nesting in can cause memory exhaustionOpen the advisorySep 1, 2026
- Medium5.9Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentialsOpen the advisorySep 1, 2026
- Medium6.9code-projects Simple Inventory System edit.php sql injectionOpen the advisoryAug 25, 2026