Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Langflow Authorization Bypass Through User-Controlled Key VulnerabilityPatch nowKEVEPSS 0.89%Jun 23, 2026
- Medium6.1A flaw was found in OpenSSH.Check if you run itEPSS 0.12%Jun 23, 2026
- Low3.7CVE-2026-55654 is listed by A flaw was found in OpenSSH..Check if you run itEPSS 0.65%Jun 23, 2026
- Medium6.5A flaw was found in OpenSSH.Check if you run itEPSS 0.53%Jun 23, 2026
- High7.1bt_iso_recv() in subsys/bluetooth/host/iso.c pulled the ISO SDU header (4 bytes) or, when the timestamp flag is set, the timestamped SDU header (8 bytes) from the inbo…Check if you run itEPSS 0.28%Jun 23, 2026
- Medium6.5bt_sdp_parse_attribute() in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-marker byte plus the 2-byte attribute ID (a che…Check if you run itEPSS 0.30%Jun 23, 2026
- Medium5.5The Zephyr ext2 filesystem driver (subsys/fs/ext2) trusted the on-disk directory entry fields de_rec_len and de_name_len when walking a directory block.Check if you run itEPSS 0.16%Jun 23, 2026
- UnknownUse-of-uninitialized-value in LibRaw::fbddOpen the advisoryJun 23, 2026
- Critical9.8Incorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Jun 23, 2026
- Unknownberqier berqwp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.03%Jun 23, 2026
- UnknownOpenBSD MPLS kernel stack leaks remotely (CVE-2026-56099) : r/netsecCheck if you run itEPSS 0.50%Jun 22, 2026
- UnknownUse-after-free in the QPACK encoder of nginx HTTP/3 - CVE-2026-42530 : r/netsecCheck if you run itEPSS 6.22%Jun 22, 2026
- Medium5.3Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 fail to validate script-capable URLs in the navigateTo open option, allowing client-side script execution.Check if you run itEPSS 0.41%Jun 22, 2026
- Medium5.3Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 accept protocol-relative paths such as //evil.com in the reloadNuxtApp function; these pass the script-protocol…Check if you run itEPSS 0.34%Jun 22, 2026
- Medium5.3Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 contain a server-side open redirect vulnerability in navigateTo that fails to properly validate path-normalized…Check if you run itEPSS 0.36%Jun 22, 2026
- UnknownCVE-2026-48510 affecting package python-msgpack 1.2.3-1Open the advisoryJun 22, 2026
- UnknownA Signature Verification Bypass in Nuclei (CVE-2024-43405) | Wiz BlogCheck if you run itEPSS 1.11%Jun 22, 2026
- UnknownNVIDIAScape - NVIDIA AI Vulnerability (CVE-2025-23266) | Wiz BlogCheck if you run itEPSS 3.32%Jun 22, 2026
- UnknownNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.Check if you run itEPSS 0.18%Jun 22, 2026
- UnknownNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.Check if you run itEPSS 0.38%Jun 22, 2026
- UnknownNet::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.Check if you run itEPSS 0.83%Jun 22, 2026
- UnknownCVE-2021-21735: ZTE H168N wizard whitelist exposed PPPoE and WLAN secrets pre-auth : r/netsecCheck if you run itEPSS 0.95%Jun 22, 2026
- HighOpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)Check if you run itEPSS 0.59%Jun 22, 2026
- UnknownOpenAM Authenticated Server-Side Request Forgery (SSRF) viaCheck if you run itEPSS 0.41%Jun 22, 2026
- HighOpenAM has LDAP Injection via ParameterCheck if you run itEPSS 0.50%Jun 22, 2026
Sort