Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure a…Check if you run itEPSS 0.22%Apr 7, 2026
- High8.8When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraCheck if you run itEPSS 0.35%Apr 7, 2026
- Medium6.4On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target liesCheck if you run itEPSS 0.30%Apr 7, 2026
- High7.5Emmett is a full-stack Python web framework designed with simplicity.Check if you run itEPSS 0.51%Apr 7, 2026
- Critical9.0SiYuan is a personal knowledge management system.Check if you run itEPSS 0.56%Apr 7, 2026
- High7.6MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.16%Apr 7, 2026
- High7.5Aardvark-dns is an authoritative dns server for A/AAAA container records.Check if you run itEPSS 0.40%Apr 7, 2026
- Low3.3Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.15%Apr 7, 2026
- Medium6.3LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.27%Apr 7, 2026
- Medium6.9Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Score Extension allows Cross-Site ScriptiCheck if you run itEPSS 0.28%Apr 7, 2026
- Medium6.9Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-SitCheck if you run itEPSS 0.28%Apr 7, 2026
- High7.5Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.Check if you run itEPSS 1.05%Apr 7, 2026
- Critical9.8Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.Check if you run itEPSS 0.25%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.84%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.84%Apr 7, 2026
- High7.5Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing.Check if you run itEPSS 0.92%Apr 7, 2026
- High8.1Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-Check if you run itEPSS 0.70%Apr 7, 2026
- Critical9.1Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing pCheck if you run itEPSS 0.52%Apr 7, 2026
- Medium6.9Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Check and Time-ofCheck if you run itEPSS 0.33%Apr 7, 2026
- Medium6.9Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension allows Cross-SiCheck if you run itEPSS 0.35%Apr 7, 2026
- High8.8Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.Check if you run itEPSS 0.27%Apr 7, 2026
- High8.7Flatpak is a Linux application sandboxing and distribution framework.Check if you run itEPSS 0.33%Apr 7, 2026
- Critical9.3Flatpak is a Linux application sandboxing and distribution framework.Check if you run itEPSS 1.71%Apr 7, 2026
- Medium5.4The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider3 controllerCheck if you run itEPSS 0.36%Apr 7, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.30%Apr 7, 2026
Sort