Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /loginCheck if you run itEPSS 0.14%Sep 25, 2026
- High8.8IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limi…Open the advisorySep 25, 2026
- High8.8IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format.Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail after a lower-devi…Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If map_addr() change…Open the advisorySep 25, 2026
- Unknown[20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatchCheck if you run itEPSS 0.27%Sep 25, 2026
- Unknown[20260908] - Core - XSS in HTML Mail TemplatesCheck if you run itEPSS 0.20%Sep 25, 2026
- High8.8D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint.Check if you run itEPSS 1.29%Sep 25, 2026
- Medium5.5smb/server: fix tree connection leak in smb2_tree_connect()Check if you run itEPSS 0.11%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the l…Check if you run itEPSS 0.11%Sep 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no r…Check if you run itEPSS 0.13%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called per-path and theref…Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged…Open the advisorySep 25, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs BPF_F_CPU stores the target CPU ID in the upper 32…Open the advisorySep 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map…Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain struct amdxdna_cmd_chain contains…Open the advisorySep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_set_error() looks up the first…Check if you run itEPSS 0.14%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if register is null Nicholas Carlini reported a bug when v…Check if you run itEPSS 0.12%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if the DMA mapping of…Check if you run itEPSS 0.12%Sep 25, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START The SCTP_CMD_TIMER_START handler checks timer_pendi…Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() sas_port_alloc_num() can return…Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() mpi3mr_get_tgtdev_by_addr()…Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3_insert_range() does not check if the new file si…Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOC_FL_ZERO_RANGE is used without FALLOC_FL_KEE…Open the advisorySep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3_insert_range() and smb3_collapse_ran…Open the advisorySep 25, 2026