Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownBIG-IP SIP ALG profile vulnerability CVE-2025-20045Check if you run itEPSS 0.41%Jun 10, 2026
- UnknownCVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationCheck if you run itEPSS 0.29%Jun 10, 2026
- UnknownCVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCheck if you run itEPSS 0.14%Jun 10, 2026
- UnknownCVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on LinuxCheck if you run itEPSS 0.10%Jun 10, 2026
- UnknownCVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingCheck if you run itEPSS 0.22%Jun 10, 2026
- UnknownCVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOSCheck if you run itEPSS 0.10%Jun 10, 2026
- UnknownCVE-2026-0270 Cortex XSOAR: Path Traversal VulnerabilityCheck if you run itEPSS 0.20%Jun 10, 2026
- UnknownCVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UICheck if you run itEPSS 1.34%Jun 10, 2026
- UnknownCVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized UsersCheck if you run itEPSS 0.11%Jun 10, 2026
- UnknownCVE-2026-0272 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)Check if you run itEPSS 0.26%Jun 10, 2026
- Medium6.3Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channe…Check if you run itEPSS 0.35%Jun 10, 2026
- High7.1Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%Jun 10, 2026
- UnknownCVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2Open the advisoryJun 10, 2026
- Medium5.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in j…Check if you run itEPSS 0.18%Jun 10, 2026
- Medium5.4Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause tha…Check if you run itEPSS 0.24%Jun 10, 2026
- Medium4.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect…Check if you run itEPSS 0.21%Jun 10, 2026
- Medium4.3Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timez…Check if you run itEPSS 0.22%Jun 10, 2026
- Medium4.3A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to can…Check if you run itEPSS 0.21%Jun 10, 2026
- Medium4.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or ne…Check if you run itEPSS 0.43%Jun 10, 2026
- Medium4.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative…Check if you run itEPSS 0.26%Jun 10, 2026
- High8.8Jenkins Jenkins Deserialization of Untrusted DataPatch nowKEVEPSS 51.17%Jun 10, 2026
- High8.4Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigit…Check if you run itEPSS 0.18%Jun 10, 2026
- High8.4Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigit…Check if you run itEPSS 0.12%Jun 10, 2026
- Critical9.8Splunk Enterprise Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.94%Jun 10, 2026
- UnknownCVE-2026-11393 - Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent ImportCheck if you run itEPSS 0.34%Jun 10, 2026
Sort