Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.6Payload: SQL injection in SQLite/PostgresEPSS 0.3%Oct 6, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw_process_probe_response() and the libipw_networkEPSS 0.3%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the TDLS code ieee80211_tdls_oper() can operate on the AP station,EPSS 0.2%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tcp: do not let tcp_rmem be set below 4096 We can hit a division by zero crash in tcp_rcvbuf_grow() and tcp_rcv_EPSS 0.2%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion andEPSS 0.2%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: fix UAF in brcms_free_timer() brcms_free_timer() calls brcms_del_timer() which uses the non-syncEPSS 0.2%Oct 6, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeroEPSS 0.4%Oct 6, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)EPSS 0.4%Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationEPSS 0.3%Sep 29, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends a two-bytEPSS 0.2%Sep 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan nvme_scan_ns_list() drops the stale namespaces in each gEPSS 0.6%Sep 25, 2026
- Unknownperf/x86/intel/pt: Fix stop/start with no updateEPSS 0.2%Sep 24, 2026
- UnknownMalicious code in gemini-computer-use (npm)Sep 21, 2026
- Critical9.8NFSv4.1: zero referring call lists before decodingEPSS 0.6%Sep 17, 2026
- High8.8drm/amdkfd: Add TLB flush after MES queue eviction/suspensionEPSS 0.2%Sep 16, 2026
- High7.5Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionEPSS 1.2%Sep 8, 2026
- Unknowndrm/vmwgfx: use check_add_overflow for shader size+offset boundEPSS 0.2%Sep 4, 2026
- Unknownipv6: seg6: clear IPv4 control block on IPIP decapsulationEPSS 0.2%Sep 4, 2026
- High7.8af_unix: Unlink scc_entry in unix_del_edge().EPSS 0.2%Aug 26, 2026
- Critical9.8macvlan: inherit needed_headroom and needed_tailroom from lowerdevEPSS 0.5%Aug 26, 2026
- UnknownMalicious code in babel-polyfill-plugin-corejs2 (npm)Aug 24, 2026
- High8.4net: smc: fix splice entry lifetime imbalance in smc_rx_spliceEPSS 0.2%Aug 22, 2026
- Medium5.5asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterEPSS 0.1%Aug 20, 2026
- UnknownMalicious code in eth-react-provider (npm)Aug 19, 2026