Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: libwx: fix races in Tx timestamp handling wx->ptp_tx_skb is shared between the Tx path, the PT…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: HID: hid-oxp: use cancel_delayed_work_sync() in remove oxp_hid_remove() uses cancel_delayed_work()…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race Commit 7270cc9157f4 ("KVM: arm…Open the advisoryOct 18, 2026
- UnknownCVE-2026-98487: net: bridge: mdb: restart port group walk after deletionOpen the advisoryOct 18, 2026
- High7.5In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML markup…Check if you run itEPSS 0.24%Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar month content templates render data.url and data.title without prope…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to 2026.3.1015, the Validator decodes validation messages from data-msg-* attributes and…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window components starting with version 2011.2.804 and the Tooltip component starting with ver…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string concatenation without pro…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryCheck if you run itEPSS 0.18%Oct 15, 2026
- Medium4.7Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium4.7Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium4.7Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium4.7Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryCheck if you run itEPSS 0.13%Oct 15, 2026
- Medium6.5Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserCheck if you run itEPSS 0.17%Oct 15, 2026
- High7.5The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP).Check if you run itEPSS 0.46%Oct 14, 2026
- High8.7HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in BanditCheck if you run itEPSS 0.53%Oct 14, 2026
- High8.0Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module).Check if you run itEPSS 0.44%Oct 14, 2026
- Medium6.5Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context.Check if you run itEPSS 0.29%Oct 14, 2026
- High7.5Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module).Check if you run itEPSS 0.39%Oct 14, 2026
- High7.2Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).Check if you run itEPSS 0.49%Oct 14, 2026
- High7.3Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.17%Oct 14, 2026
195 records · page 1 of 8
PreviousNext