Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8net: pktgen: fix proc entry use-after-freeEPSS 0.1%Aug 15, 2026
- High8.8sctp: prevent peer transport count overflowEPSS 1.5%Aug 15, 2026
- Critical9.4cifs: validate DFS referral string offsetsEPSS 0.6%Aug 15, 2026
- Critical9.3KVM: arm64: vgic: Check the interrupt is still ours before migrating itEPSS 0.2%Aug 15, 2026
- High7.8ocfs2: avoid moving extents to occupied clustersEPSS 0.2%Aug 15, 2026
- High7.8cpu: hotplug: Bound hotplug states sysfs outputEPSS 0.2%Aug 15, 2026
- UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsEPSS 0.6%Aug 13, 2026
- UnknownAvoid quadratic complexity in resolvePath in net/urlEPSS 0.5%Aug 13, 2026
- UnknownFix Javascript regexp context tracking in html/templateEPSS 0.3%Aug 13, 2026
- UnknownEnforce maximum recursion depth in encoding/asn1EPSS 0.6%Aug 13, 2026
- High8.8wifi: mac80211: defer link RX stats percpu free to RCUEPSS 0.2%Aug 10, 2026
- Unknowndrm/dp/mst: fix buffer overflows in sideband chunk accumulationEPSS 0.2%Aug 10, 2026
- High7.8drm/amd/display: set new_stream to NULL after releaseEPSS 0.1%Aug 10, 2026
- Critical9.8openvswitch: fix GSO userspace truncation underflowEPSS 0.6%Aug 10, 2026
- High8.8drm/amdgpu/vce: fix integer overflow in image sizeEPSS 0.1%Aug 10, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesAug 7, 2026
- Critical9.8smb: client: fix double-free in SMB2_ioctl() replayEPSS 0.5%Jul 25, 2026
- High8.2OmniFaces is a utility library for Faces.Jul 24, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchEPSS 0.2%Jul 24, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataEPSS 0.4%Jul 21, 2026
- High7.8i2c: stub: Reject I2C block transfers with invalid lengthEPSS 0.1%Jul 20, 2026
- High7.1ipv6: validate extension header length before copying to cmsgEPSS 0.2%Jul 19, 2026
- Critical9.6Prowler is a cloud security platform.Jul 10, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionEPSS 0.4%Jul 8, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplEPSS 0.3%Jul 6, 2026