Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight…Check if you run itEPSS 0.13%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags aft…Check if you run itEPSS 0.21%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of s…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata while obta…Check if you run itEPSS 0.18%Aug 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protect…Check if you run itEPSS 0.18%Aug 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost_scsi_setup_vq_cmds() runs from VHOST_SCSI_S…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Another challenge w…Check if you run itEPSS 0.13%Aug 22, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max_qlen accounting across reuseport migration A listener's TCP_FASTOPEN max_qlen stop…Check if you run itEPSS 0.49%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip_vs_in_icmp() rebases an skb from the…Check if you run itEPSS 0.51%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mismatched IDs ovs_flow_cmd_new() preallocates the…Check if you run itEPSS 0.18%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154_beacon_worker() reads local->beacon…Check if you run itEPSS 0.13%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_log_unregister() runs after the per-net teardown so…Check if you run itEPSS 0.13%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: serial: 8250_dma: Clear stale RX state on shutdown serial8250_release_dma() terminates RX DMA and r…Check if you run itEPSS 0.18%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damon_pa_migrate() and damos_va_migrate(…Check if you run itEPSS 0.17%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd_us428ctls_vm_fault() turns the faulting page off…Check if you run itEPSS 0.13%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix group leader use-after-free after sibling detach perf_group_detach() handles leader…Check if you run itEPSS 0.13%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs->lock in dibs_dev_alloc() dibs->lock is initialised by dibs_dev_add(), but a…Check if you run itEPSS 0.65%Aug 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlan_changelink() arms vxlan->age_time…Check if you run itEPSS 0.13%Aug 22, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate and path_truncate hooks Instantiate the file_truncate and path_trunc…Check if you run itEPSS 0.34%Aug 22, 2026
- Medium6.9NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py.Check if you run itEPSS 0.33%Aug 22, 2026
- Critical9.1Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them.Check if you run itEPSS 0.50%Aug 22, 2026
- UnknownTenda g0_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 25.37%Aug 22, 2026
- High7.7TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation.Check if you run itEPSS 0.40%Aug 21, 2026
- High8.6Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - J2Commerce 4.1.5 is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.52%Aug 21, 2026
- High8.7SpecifyJS is a declarative TypeScript user interface framework.Check if you run itEPSS 0.48%Aug 21, 2026