Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownImproper AuthenticationPatch nowKEVEPSS 0.87%Aug 6, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 27.86%Aug 3, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.58%Aug 3, 2026
- UnknownKestra kestra Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.30%Aug 1, 2026
- High7.1netfilter: ebtables: module names must be null-terminatedCheck if you run itEPSS 0.13%Jul 25, 2026
- High7.1netfilter: ebtables: terminate table name before find_table_lock()Check if you run itEPSS 0.13%Jul 25, 2026
- High8.2OmniFaces is a utility library for Faces.Check if you run itEPSS 0.31%Jul 24, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchCheck if you run itEPSS 0.21%Jul 24, 2026
- High7.6The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command siz…Check if you run itEPSS 0.16%Jul 21, 2026
- Medium6.5In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdog timer unconditio…Check if you run itEPSS 0.39%Jul 21, 2026
- Medium5.5The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, called LPUART_Deinit() at the start of mcux_lpuart…Check if you run itEPSS 0.14%Jul 21, 2026
- Unknownphpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%Jul 20, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->subrequests locklessly The list of subrequests a…Check if you run itEPSS 0.50%Jul 19, 2026
- High7.8blk-mq: pop cached request if it is usableCheck if you run itEPSS 0.13%Jul 19, 2026
- Critical9.3Sangoma Switchvox SQL Injection VulnerabilityPatch nowKEVEPSS 18.98%Jul 17, 2026
- Critical9.1subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri, size CONFIG_LWM2M_SWMGMT_PACKAGE_URI_LEN, def…Check if you run itEPSS 0.58%Jul 14, 2026
- High7.8On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the architecture hook that verifies a user-mode-su…Check if you run itEPSS 0.18%Jul 14, 2026
- Medium5.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions,…Check if you run itEPSS 0.67%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- High7.5Socket.IO enables bidirectional and low-latency communication for every platform.Check if you run itEPSS 0.64%Jul 8, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityPatch nowKEVEPSS 0.84%Jul 8, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 2.05%Jul 8, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.04%Jul 7, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplCheck if you run itEPSS 0.29%Jul 6, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026