Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: monaco: Reserve full Gunyah metadata region We observe spurious "Synchronous Exte…Check if you run itEPSS 0.61%May 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Properly mark live registers for indirect jumps For a instruction the rX register should be ma…Check if you run itEPSS 0.17%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix PM runtime usage count underflow Replace pm_runtime_put_sync() with…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to a…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing The recent refactoring o…Check if you run itEPSS 0.12%May 8, 2026
- Critical9.1Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants.Check if you run itEPSS 0.50%May 8, 2026
- Medium5.3Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform.Check if you run itEPSS 0.44%May 8, 2026
- Critical9.1Apache::Session versions through 1.94 for Perl re-creates deleted sessions.Check if you run itEPSS 0.36%May 8, 2026
- High8.6The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow…Check if you run itEPSS 0.45%May 8, 2026
- High7.3An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209.Check if you run itEPSS 3.60%May 8, 2026
- Critical9.6electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.51%May 8, 2026
- Medium6.3An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing th…Check if you run itEPSS 0.41%May 7, 2026
- Medium6.5VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as…Check if you run itEPSS 0.15%May 7, 2026
- Critical9.8NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution.Check if you run itEPSS 0.48%May 7, 2026
- Medium4.3Weblate is a web based localization tool.Check if you run itEPSS 0.37%May 7, 2026
- High8.3Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Inform…Check if you run itEPSS 0.22%May 7, 2026
- Critical9.8Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.25%May 7, 2026
- High7.5GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.Check if you run itEPSS 0.60%May 7, 2026
- High7.5GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.Check if you run itEPSS 0.60%May 7, 2026
- Critical9.3Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications.Check if you run itEPSS 0.63%May 7, 2026
- High8.2Admidio is an open-source user management solution.Check if you run itEPSS 0.22%May 7, 2026
- Medium6.5The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.6.10.6.Check if you run itEPSS 0.48%May 7, 2026
- High8.5OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override criti…Check if you run itEPSS 0.19%May 6, 2026
- Medium4.9OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows attackers to pivot to untrusted s…Check if you run itEPSS 0.44%May 6, 2026
- High7.1Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.22%May 6, 2026