Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.8Red Hat Security Advisory: kernel security, bug fix, and enhancement updateAug 20, 2026
- High7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks.EPSS 0.1%Aug 20, 2026
- High7.5In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, cEPSS 0.3%Aug 20, 2026
- UnknownMalicious code in eth-react-provider (npm)Aug 19, 2026
- High7.8Vim is an open source, command line text editor.EPSS 0.2%Aug 18, 2026
- UnknownExpat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified atEPSS 0.7%Aug 18, 2026
- High8.7Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement updateAug 18, 2026
- High8.8Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rspEPSS 0.3%Aug 15, 2026
- High8.8Bluetooth: ISO: fix refcounting of iso_connAug 15, 2026
- High8.8Bluetooth: hci_conn: hold conn reference in abort_conn_sync()Aug 15, 2026
- High7.8net: pktgen: fix proc entry use-after-freeEPSS 0.1%Aug 15, 2026
- High7.8scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB writeAug 15, 2026
- High8.8sctp: prevent peer transport count overflowEPSS 1.5%Aug 15, 2026
- Critical9.8ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()EPSS 0.7%Aug 15, 2026
- Critical9.4cifs: validate DFS referral string offsetsEPSS 0.6%Aug 15, 2026
- Critical9.3KVM: arm64: vgic: Check the interrupt is still ours before migrating itEPSS 0.2%Aug 15, 2026
- High7.8ocfs2: avoid moving extents to occupied clustersEPSS 0.2%Aug 15, 2026
- High7.8cpu: hotplug: Bound hotplug states sysfs outputEPSS 0.2%Aug 15, 2026
- UnknownPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.EPSS 0.3%Aug 14, 2026
- UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsEPSS 0.6%Aug 13, 2026
- UnknownAvoid quadratic complexity in resolvePath in net/urlEPSS 0.5%Aug 13, 2026
- UnknownFix Javascript regexp context tracking in html/templateEPSS 0.3%Aug 13, 2026
- UnknownEnforce maximum recursion depth in encoding/asn1EPSS 0.6%Aug 13, 2026
- Medium6.1A flaw was found in GStreamer gst-plugins-good (avidemux).EPSS 0.1%Aug 12, 2026
- Medium6.6A flaw was found in GStreamer gst-plugins-good (avidemux).EPSS 0.1%Aug 12, 2026