Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent UAF/double-free race In smb2_lock(), mid-batch gra…Check if you run itEPSS 0.65%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: safely discard unregistered deferred locks When vfs_lock_file() defers a lock, smb2_lock() p…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: detach blocked lock requests before freeing A file_lock retained by ksmbd for byte-range loc…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound connections ksmbd_all_conn_set_status() treats every co…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Clear per-CPU IRS data on teardown IRS affinity setup publishes an IRS pointer and…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier *_change…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: fuse: Fix the condition to enable over-io-uring The existing condition in fuse_uring_cmd() is there…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Since commit b66774b48dd9 ("Bluetooth:…Check if you run itEPSS 0.18%Sep 17, 2026
- High8.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs.Check if you run itEPSS 0.35%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hci_conn when a second LE connect is rejected create_le_conn_complete() d…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size mana_gd_query_max_resources() sizes gc-…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() rvu_mbox_init() is called sepa…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownOAuth2 sign-in attached to an existing account without an email comparison in AshAuthenticationCheck if you run itEPSS 0.75%Sep 17, 2026
- UnknownRevoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication PhoenixCheck if you run itEPSS 0.91%Sep 17, 2026
- High7.1A flaw was found in Redis community.Check if you run itEPSS 0.40%Sep 17, 2026
- High7.8A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true.Check if you run itEPSS 0.24%Sep 17, 2026
- High7.1The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unau…Check if you run itEPSS 0.16%Sep 17, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.98%Sep 17, 2026
- Critical9.3Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation.Check if you run itEPSS 0.44%Sep 16, 2026
- Critical9.8LMDeploy is a toolkit for compressing, deploying, and serving large language models.Check if you run itEPSS 0.80%Sep 16, 2026
- Critical9.1Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.Check if you run itEPSS 0.48%Sep 16, 2026
- UnknownCisco Identity Services Engine Cross-Site Scripting VulnerabilityCheck if you run itEPSS 0.19%Sep 16, 2026
- Medium4.9ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure VulnerabilityCheck if you run itEPSS 0.29%Sep 16, 2026
- High8.8Backstage is an open framework for building developer portals.Check if you run itEPSS 1.18%Sep 16, 2026