Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8A flaw was found in FreeIPA.Check if you run itEPSS 1.21%Sep 7, 2026
- Medium6.5A flaw was found in odh-dashboard in Red Hat OpenShift AI.Check if you run itEPSS 0.41%Sep 7, 2026
- Unknownmonstaftp monsta_ftp Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.51%Sep 7, 2026
- UnknownSecurity exception in org.apache.lucene.util.ArrayUtil.copyOfSubArrayOpen the advisorySep 6, 2026
- Critical10.0N-able N-central Static Code Injection VulnerabilityPatch nowKEVEPSS 13.35%Sep 5, 2026
- High7.5libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iteratOpen the advisorySep 5, 2026
- UnknownCVE-2026-6554 affecting package libpcap for versions less than 1.10.7-1Open the advisorySep 5, 2026
- Critical9.2MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityPatch nowKEVEPSS 6.39%Sep 5, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 1.05%Sep 5, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.56%Sep 5, 2026
- UnknownCVE-2026-86091 affecting package ntopng for versions less than 5.2.1-7Open the advisorySep 4, 2026
- UnknownCVE-2026-86090 affecting package ntopng for versions less than 5.2.1-7Open the advisorySep 4, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and tx_gen ordering This patch is a follow-up to commit cf070Check if you run itEPSS 0.18%Sep 4, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tipc: avoid busy looping in tipc_exit_net() Blamed commit introduced a busy-wait loop in tipc_exit_…Check if you run itEPSS 0.21%Sep 4, 2026
- Unknowndrm/vmwgfx: use check_add_overflow for shader size+offset boundCheck if you run itEPSS 0.17%Sep 4, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon during display updates in fb_…Check if you run itEPSS 0.21%Sep 4, 2026
- Unknownipv6: seg6: clear IPv4 control block on IPIP decapsulationCheck if you run itEPSS 0.21%Sep 4, 2026
- Medium5.9Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body readCheck if you run itEPSS 0.32%Sep 4, 2026
- Low2.1A vulnerability was identified in Eleveo Quality Management 9.7.0.Check if you run itEPSS 0.49%Sep 4, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.94%Sep 4, 2026
- Medium6.8MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory.Check if you run itEPSS 0.23%Sep 3, 2026
- High8.8MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization.Check if you run itEPSS 0.67%Sep 3, 2026
- Medium5.2MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that writes a NUL terminator one byte past the serial telegram…Check if you run itEPSS 0.32%Sep 3, 2026
- Medium5.3MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts.Check if you run itEPSS 0.34%Sep 3, 2026
- High7.1MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast comm…Check if you run itEPSS 0.36%Sep 3, 2026