Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownDeleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences overlap.Open the advisoryOct 18, 2026
- UnknownThe visibility check of Gitea user profiles was applied to GET requests only, while (follow and unfollow) required only a signed-in user.Open the advisoryOct 18, 2026
- Unknownwas registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected.Open the advisoryOct 18, 2026
- UnknownThe Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit.Open the advisoryOct 18, 2026
- UnknownRequesting for an individual user instead of an organization made the organization home handler dereference a nil organization and panic.Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() skb_maybe_pull_tail() subtracts…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dst_dev_overhead() The seg6, ioam6 and rpl lwtunnels siz…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ip_gre: Reject enabling collect metadata through changelink ipgre_netlink_parms() can enable collec…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/imagination: clamp freelist reconstruction requests The firmware reconstruction count controls…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 The core and io supplies are…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylink_bringup_phy() stores the PHY in…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: libwx: fix races in Tx timestamp handling wx->ptp_tx_skb is shared between the Tx path, the PT…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Commit 48a5fe38772b…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() nouveau_bo_pin_locked…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: airoha: npu: cancel wdt_work after releasing the WDT IRQ airoha_npu_remove() calls cancel_work…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure ena_device_init() initializes the MMIO read me…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read rt_mt6_check() permits rul…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip expired catchall elements on insert and delete nft_setelem_catchall_inse…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Keep internal commands dispatchable during error handling Commit 08b12cda6c44 ("sc…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer callback clears next…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags schedule_deferred_locked() skips sch…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open_cached_dir() sends CREATE and QUERY_INFO a…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fai…Open the advisoryOct 18, 2026
- UnknownCVE-2026-98545: ata: libata-scsi: bound the ATA passthru sense descriptor writesOpen the advisoryOct 18, 2026
- UnknownCVE-2026-98541: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECTOpen the advisoryOct 18, 2026
5,816 records · page 1 of 233
PreviousNext