Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2CoreDNS is a DNS server written in Go.Check if you run itEPSS 0.75%May 5, 2026
- Critical9.3Masa CMS is an open source content management system.Check if you run itEPSS 0.51%May 5, 2026
- High7.6Jupyter Server is the backend for Jupyter web applications.Check if you run itEPSS 0.67%May 5, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86-64: rename misleadingly named '__copy_user_nocache()' function This function was a masterclass…Check if you run itEPSS 0.16%May 5, 2026
- High7.1OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators to modify persistent memory dreaming settings.Check if you run itEPSS 0.38%May 5, 2026
- Medium6.5The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.47%May 5, 2026
- High7.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.42%May 4, 2026
- High7.8Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.Check if you run itEPSS 0.07%May 4, 2026
- High7.5Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.Check if you run itEPSS 0.22%May 4, 2026
- Critical10.0GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices.Check if you run itEPSS 0.87%May 4, 2026
- Medium6.3Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers.Check if you run itEPSS 0.55%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus memset() The memset() in hid_report_raw_event()…Check if you run itEPSS 0.40%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zero drop_level [BUG] When recovering relocation at…Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE verdict nft_queue is always used from userspace nft…Check if you run itEPSS 0.17%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal reason switchdev mode…Check if you run itEPSS 0.16%May 1, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() The memcpy…Check if you run itEPSS 0.41%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute for the virt_wi…Check if you run itEPSS 0.17%May 1, 2026
- High8.4The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization.Check if you run itEPSS 0.38%May 1, 2026
- High8.6SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without paramete…Check if you run itEPSS 0.77%Apr 30, 2026
- Low2.1SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting m…Check if you run itEPSS 0.29%Apr 30, 2026
- High7.1ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated a…Check if you run itEPSS 0.79%Apr 27, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.Check if you run itEPSS 7.16%Apr 27, 2026
- Critical9.8JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via java…Check if you run itEPSS 1.53%Apr 27, 2026
- Medium5.3A vulnerability was determined in baomidou dynamic-datasource 2.5.0.Check if you run itEPSS 0.41%Apr 26, 2026
- High8.7Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote aut…Check if you run itEPSS 0.97%Apr 24, 2026