Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityPatch nowKEVEPSS 71.66%Aug 13, 2026
- UnknownD-Link dir-868l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.97%Aug 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.74%Aug 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.74%Aug 13, 2026
- High8.1IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could…Check if you run itEPSS 0.35%Aug 12, 2026
- UnknownHTTP/2 Bomb CVE-2026-49975Check if you run itEPSS 4.17%Aug 12, 2026
- Medium5.4ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery VulnerabilityOpen the advisoryAug 12, 2026
- Medium5.4ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery VulnerabilityCheck if you run itEPSS 0.20%Aug 12, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time (most of it…Check if you run itEPSS 0.15%Aug 12, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on a…Open the advisoryAug 12, 2026
- UnknownServer-Side Request Forgery (SSRF)Check if you run itEPSS 0.26%Aug 12, 2026
- Medium5.3A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding.Open the advisoryAug 11, 2026
- High7.5A flaw was found in EAP's jboss-remoting.Open the advisoryAug 11, 2026
- High8.6Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityPatch nowKEVEPSS 1.01%Aug 11, 2026
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.62%Aug 11, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing star…Open the advisoryAug 10, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_sched_scan_results() can queu…Open the advisoryAug 10, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update MGMT_OP_LOAD_CONN_PARAM queues conn_updat…Open the advisoryAug 10, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip…Open the advisoryAug 10, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2_oplock_break_noti() and smb2_lease_brea…Open the advisoryAug 10, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiex_process_uap_event() hand…Open the advisoryAug 10, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctp_process_strreset_inreq() When processing a RESET_IN_REQUEST fro…Open the advisoryAug 10, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 0.87%Aug 6, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 27.86%Aug 3, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.58%Aug 3, 2026