Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation.Check if you run itEPSS 0.16%May 14, 2026
- High8.8OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation.Check if you run itEPSS 0.45%May 14, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module.Check if you run itEPSS 0.73%May 13, 2026
- High8.4An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an at…Check if you run itEPSS 0.17%May 12, 2026
- High8.4An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an at…Check if you run itEPSS 0.17%May 12, 2026
- High7.1NanaZip is an open source file archive.Check if you run itEPSS 0.16%May 12, 2026
- Medium6.2Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.Check if you run itEPSS 0.42%May 12, 2026
- High7.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.47%May 12, 2026
- Medium5.4Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.68%May 12, 2026
- Medium5.5Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.40%May 12, 2026
- Medium5.5Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.26%May 12, 2026
- High8.3Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service.Check if you run itEPSS 0.12%May 12, 2026
- High8.7pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes.Check if you run itEPSS 0.45%May 12, 2026
- Medium6.9barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent parsing due to missing validation of the eh_entries field against buffer…Check if you run itEPSS 0.22%May 11, 2026
- High7.1barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_message_type() function that fails to verify the…Check if you run itEPSS 0.38%May 11, 2026
- High7.3An out-of-bounds read was addressed with improved bounds checking.Check if you run itEPSS 0.39%May 11, 2026
- High7.5An out-of-bounds read was addressed with improved bounds checking.Check if you run itEPSS 0.59%May 11, 2026
- Medium6.5A memory corruption issue was addressed with improved input validation.Check if you run itEPSS 0.46%May 11, 2026
- Medium6.5An out-of-bounds access issue was addressed with improved bounds checking.Check if you run itEPSS 0.42%May 11, 2026
- High7.3A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, e…Check if you run itEPSS 0.69%May 11, 2026
- Medium5.3A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.Check if you run itEPSS 0.84%May 11, 2026
- High7.5XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.Check if you run itEPSS 0.88%May 10, 2026
- Medium6.3In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is passed to mb_convert_encoding() or related mbstrin…Check if you run itEPSS 0.60%May 10, 2026
- Medium6.3In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a sign…Check if you run itEPSS 0.84%May 10, 2026
- Medium6.3In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype…Check if you run itEPSS 0.40%May 10, 2026