Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4CodeWhale is a DeepSeek + MiMo coding agent in terminal.Check if you run itEPSS 0.37%May 28, 2026
- Medium6.9pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.18%May 28, 2026
- Medium6.2FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py.Check if you run itEPSS 0.42%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() msm_ioctl_gem_info_get_metadat…Check if you run itEPSS 0.16%May 28, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofs_export_iget isofs_fh_to_dentry() and iso…Check if you run itEPSS 0.48%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There's a bug in dm-thin in the function rebalance_children.Check if you run itEPSS 0.13%May 28, 2026
- Critical9.8A flaw was found in Samba.Check if you run itEPSS 1.75%May 28, 2026
- High7.0A command injection vulnerability was discovered in the utility of RPM.Check if you run itEPSS 0.92%May 28, 2026
- Medium6.5The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1.Check if you run itEPSS 0.41%May 28, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.37%May 28, 2026
- Medium4.3The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via t…Check if you run itEPSS 0.38%May 28, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: md/raid5: validate payload size before accessing journal metadata r5c_recovery_analyze_meta_block()…Check if you run itEPSS 0.13%May 27, 2026
- Critical9.8FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynamic_binary_buffer.hpp).Check if you run itEPSS 0.91%May 26, 2026
- Medium5.9Kavita is a cross platform reading server.Check if you run itEPSS 0.39%May 26, 2026
- Medium4.3Bugsink is a self-hosted error tracking tool.Check if you run itEPSS 0.28%May 26, 2026
- Critical9.0A flaw was found in the Samba printing subsystem.Patch nowKEVEPSS 13.93%May 26, 2026
- High8.7luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packages feed…Check if you run itEPSS 7.83%May 26, 2026
- High7.1libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-h…Check if you run itEPSS 0.64%May 26, 2026
- Medium4.1When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stor…Check if you run itEPSS 0.26%May 26, 2026
- Medium6.9Interpretation Conflict vulnerability in benoitc hackney allows Server Side Request Forgery.Check if you run itEPSS 0.16%May 25, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (…Check if you run itEPSS 1.99%May 23, 2026
- High8.2The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information disclosure due to missing authorization checks on…Check if you run itEPSS 0.46%May 23, 2026
- High8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.Check if you run itEPSS 0.18%May 22, 2026
- Medium6.1Devise is an authentication solution for Rails based on Warden.Check if you run itEPSS 0.32%May 22, 2026
- Medium6.5TypeBot is a chatbot builder tool.Check if you run itEPSS 0.16%May 22, 2026