Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix cifsFileInfo reference leak in deferred close When cifs_close() defers a close, it…Check if you run itEPSS 0.21%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() cifs_posix_to_fattr() ignores…Check if you run itEPSS 0.20%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends a two-bytCheck if you run itEPSS 0.11%Sep 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in resp_worker() Although 'commit 2feec5ae5df7 ("accel/qaic: HaCheck if you run itEPSS 0.12%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure.Check if you run itEPSS 0.16%Sep 25, 2026
- Medium6.5Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path to bypass the locatiCheck if you run itEPSS 0.40%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCreCheck if you run itEPSS 0.37%Sep 25, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Sep 25, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the cu…Check if you run itEPSS 0.35%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 The changes introduced to hand…Check if you run itEPSS 0.19%Sep 24, 2026
- High7.4In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xive_init_ipis() fails (e.g.Check if you run itEPSS 0.14%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock [FALSE ALERTS] There is a bug rep…Check if you run itEPSS 0.20%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpi_bus_get_primary_device() The function used for obtaining the first "physi…Check if you run itEPSS 0.20%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel job timeout when device already wedged igt@xe_wedged@wedged-at-any-tim…Check if you run itEPSS 0.20%Sep 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it w…Check if you run itEPSS 0.23%Sep 24, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd_net boolean flags to unsigned long flags word nfsd_net contains several boolean…Check if you run itEPSS 0.42%Sep 24, 2026
- Unknownperf/x86/intel/pt: Fix stop/start with no updateCheck if you run itEPSS 0.18%Sep 24, 2026
- UnknownVU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerabilityCheck if you run itEPSS 0.36%Sep 24, 2026
- High8.1A path traversal vulnerability was found in pulpcore.Check if you run itEPSS 0.34%Sep 24, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.59%Sep 24, 2026
- High7.5A flaw was found in the OpenShift console.Check if you run itEPSS 0.53%Sep 23, 2026
- Critical9.1RabbitMQ: Trust-store whitelist by Issuer+Serial onlyCheck if you run itEPSS 0.23%Sep 23, 2026
- High8.2RabbitMQ: Web-MQTT decompression bombCheck if you run itEPSS 0.40%Sep 23, 2026
- High7.1RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated sizeCheck if you run itEPSS 0.30%Sep 23, 2026
- High7.2A flaw was found in the Ansible Automation Platform automation controller.Check if you run itEPSS 0.43%Sep 23, 2026