Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A flaw was found in Netty's HTTP/2 codec.Check if you run itEPSS 2.56%Sep 18, 2026
- Medium6.5A flaw was found in Netty.Check if you run itEPSS 0.48%Sep 18, 2026
- High7.5A flaw was found in Netty RtspDecoder.Check if you run itEPSS 0.77%Sep 18, 2026
- High7.5A flaw was found in Netty's WebSocketServerExtensionHandler.Check if you run itEPSS 1.08%Sep 18, 2026
- High7.5A flaw was found in Netty's HttpServerCodec.Check if you run itEPSS 0.73%Sep 18, 2026
- High7.5A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count.Check if you run itEPSS 0.85%Sep 18, 2026
- High7.4A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Ori…Check if you run itEPSS 0.24%Sep 18, 2026
- UnknownMalicious code in tailwindcss-form (npm)Open the advisorySep 18, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.96%Sep 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in esp_ssg_unref() esp_ssg_unref() releases the page reference…Check if you run itEPSS 0.17%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_execute_get_log_page_rmi() lea…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: md: remove REQ_NOWAIT support from raid1/10/456 REQ_NOWAIT support in md personalities that can blo…Check if you run itEPSS 0.17%Sep 17, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent UAF/double-free race In smb2_lock(), mid-batch gra…Check if you run itEPSS 0.63%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: detach blocked lock requests before freeing A file_lock retained by ksmbd for byte-range loc…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound connections ksmbd_all_conn_set_status() treats every co…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size mana_gd_query_max_resources() sizes gc-…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.1The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unau…Check if you run itEPSS 0.16%Sep 17, 2026
- Unknowndolibarr dolibarr_erp\/crm Incorrect AuthorizationPatch nowKEVEPSS 1.56%Sep 17, 2026
- Unknownpaytm payment_gateway Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 41.76%Sep 17, 2026
- UnknownCisco BroadWorks CommPilot Application Software Authorization Bypass VulnerabilityCheck if you run itEPSS 0.56%Sep 16, 2026
- UnknownCisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityCheck if you run itEPSS 0.19%Sep 16, 2026
- Medium4.9ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure VulnerabilityCheck if you run itEPSS 0.29%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmem_invalida…Check if you run itEPSS 0.21%Sep 16, 2026
- High7.2ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026
- High7.7ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026