Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() CO-RE accessor strings are col…Check if you run itEPSS 0.14%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_get_next_key() list_next_entry() never returns NUL…Check if you run itEPSS 0.13%May 27, 2026
- Medium6.8A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.Check if you run itEPSS 0.26%May 27, 2026
- High8.2CGA-wfch-vf83-qhh3Open the advisoryMay 27, 2026
- Medium5.5A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on…Check if you run itEPSS 0.09%May 27, 2026
- High8.6A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.Check if you run itEPSS 0.37%May 27, 2026
- High7.5An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user cred…Check if you run itEPSS 0.47%May 27, 2026
- Critical9.8Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is…Check if you run itEPSS 0.53%May 27, 2026
- Medium5.4Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 al…Check if you run itEPSS 0.25%May 27, 2026
- Low2.7Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users w…Check if you run itEPSS 0.25%May 27, 2026
- Medium4.9Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticate…Check if you run itEPSS 0.34%May 27, 2026
- Low2.7Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote aut…Check if you run itEPSS 0.25%May 27, 2026
- Medium4.9Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows rem…Check if you run itEPSS 0.23%May 27, 2026
- Medium4.9Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with a…Check if you run itEPSS 0.34%May 27, 2026
- Low2.7Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.…Check if you run itEPSS 0.33%May 27, 2026
- High8.7A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files locate…Check if you run itEPSS 0.19%May 27, 2026
- High8.7The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing a…Check if you run itEPSS 0.22%May 27, 2026
- UnknownCVE-2024-38166 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsrisiko durch Cross-Site-Scripting in Microsoft Dynamics 365Check if you run itEPSS 0.75%May 27, 2026
- High7.3IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.Check if you run itEPSS 0.44%May 27, 2026
- High7.3IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID.Check if you run itEPSS 0.26%May 27, 2026
- High7.5IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.Check if you run itEPSS 0.57%May 27, 2026
- Medium5.5IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date.Check if you run itEPSS 0.13%May 27, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could havCheck if you run itEPSS 0.19%May 27, 2026
- Medium5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could havCheck if you run itEPSS 0.36%May 27, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational flows were enabledCheck if you run itEPSS 0.20%May 27, 2026
Sort