Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by se…Check if you run itEPSS 0.43%Jun 22, 2026
- UnknownFull Disclosure: CVE-2019-11932 (double free in libpl_droidsonroids_gif) many apps vulnerableCheck this weekEPSS 44.53%Jun 22, 2026
- UnknownSocial Book Facebook Clone 2010 multiple scripts cross-site scripting CVE-2011-5190 Vulnerability ReportCheck if you run itEPSS 1.21%Jun 22, 2026
- UnknownGBU Facebook component for Joomla! index.php SQL injection CVE-2010-5056 Vulnerability ReportCheck if you run itEPSS 2.27%Jun 22, 2026
- UnknownAdvisory: WhatsApp for Android Privacy Issues with Handling of Media Files [CVE-2017-8769] | Nightwatch CybersecurityCheck if you run itEPSS 0.21%Jun 22, 2026
- Unknown894352 – (CVE-2013-0240, CVE-2013-1799) CVE-2013-0240 gnome-online-accounts: Does not check SSL certificates when creating Windows Live or Facebook accountsCheck if you run itEPSS 1.03%Jun 22, 2026
- Unknown894352 – (CVE-2013-0240, CVE-2013-1799) CVE-2013-0240 gnome-online-accounts: Does not check SSL certificates when creating Windows Live or Facebook accountsCheck if you run itEPSS 1.36%Jun 22, 2026
- Medium5.4A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable.Check if you run itEPSS 0.25%Jun 22, 2026
- Medium4.3A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints.Check if you run itEPSS 0.29%Jun 22, 2026
- High7.7Grafana: Schwachstelle ermöglicht Offenlegung von InformationenCheck if you run itEPSS 0.44%Jun 22, 2026
- High7.0libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handlingCheck if you run itEPSS 0.36%Jun 22, 2026
- High7.5Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyCheck if you run itEPSS 0.84%Jun 22, 2026
- Low3.7Duplicate Advisory: ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoSOpen the advisoryJun 21, 2026
- High7.5Stack overflow in lopdf via deeply nested PDF objectsOpen the advisoryJun 21, 2026
- Critical9.9Prefect has Git Flag Injection via commit_sha and directories Parameters Leading to Remote Code Execution (RCE)Check if you run itEPSS 1.03%Jun 20, 2026
- Low2.3Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript component that writes slot content to innerHTML without escaping.Check if you run itEPSS 0.34%Jun 20, 2026
- Critical9.3FlowiseAI Flowise Improper Control of Generation of CodePatch nowKEVEPSS 0.66%Jun 20, 2026
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 20.07%Jun 20, 2026
- Medium6.5SurrealDB: Denial of Service via deep operator chainsCheck if you run itEPSS 0.49%Jun 19, 2026
- High7.7SurrealDB: Arbitrary file read via DEFINE ANALYZER mapper() filterCheck if you run itEPSS 0.48%Jun 19, 2026
- Highgithubtoplanguages: Command Injection via Issue Title in Discord Notification WorkflowCheck if you run itEPSS 0.53%Jun 19, 2026
- HighUni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requestsCheck if you run itEPSS 0.26%Jun 19, 2026
- High7.1libde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.37%Jun 19, 2026
- UnknownCVE-2026-9375Open the advisoryJun 19, 2026
- High7.6A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.Check if you run itEPSS 0.45%Jun 19, 2026
Sort