Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 97.34%Aug 6, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchCheck if you run itEPSS 0.21%Jul 24, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataCheck if you run itEPSS 0.39%Jul 21, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 ("erofs: use meta buffers…Check if you run itEPSS 0.13%Jul 19, 2026
- High8.1The Zephyr net_buf library (lib/net_buf/buf.c) manipulated both of its reference counts -- the per-header buf->ref and the per-data-block ref_count at the start of eac…Check if you run itEPSS 0.42%Jun 30, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_destroy() calls metadata…Check if you run itEPSS 0.19%Jun 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADD_OUT_STREAMS is denied, SCTP only shr…Check if you run itEPSS 0.53%Jun 24, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolCheck if you run itEPSS 0.30%Jun 19, 2026
- High8.5SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbit…Check if you run itEPSS 0.18%Jun 9, 2026
- Critical9.8The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.48%Jun 2, 2026
- Medium6.3Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal…Check if you run itEPSS 0.37%Jun 2, 2026
- High8.5The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler, implemented in napoca/kernel/handler.c.Check if you run itEPSS 0.12%Jun 2, 2026
- High8.5Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bios_handlers.c.Check if you run itEPSS 0.12%Jun 2, 2026
- Medium4.3An improper authorization vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.45%Jun 2, 2026
- Medium4.3The Remove meta boxes per user role plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.01.Check if you run itEPSS 0.20%Jun 2, 2026
- Medium6.4The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) plugin for WordPress is vulnerable to Stored Cross-Site Scripting v…Check if you run itEPSS 0.32%Jun 2, 2026
- Low1.9A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2.Check if you run itEPSS 0.12%Jun 2, 2026
- Medium4.3Kiteworks is a private data network (PDN).Check if you run itEPSS 0.14%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaus…Check if you run itEPSS 0.47%Jun 1, 2026
- Medium5.5A vulnerability was determined in SourceCodester SEO Meta Tag Extractor 1.0.Check if you run itEPSS 0.29%Jun 1, 2026
- Low2.7Capsule is a multi-tenancy and policy-based framework for Kubernetes.Check if you run itEPSS 0.25%Jun 1, 2026
- Low2.1A vulnerability was determined in indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583.Check if you run itEPSS 0.21%Jun 1, 2026
- Medium5.1Lightweight Music Server (LMS) though 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by embedding ma…Check if you run itEPSS 0.30%Jun 1, 2026
- Medium5.4Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium5.9Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All.Check if you run itEPSS 0.51%Jun 1, 2026