Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism.Check if you run itEPSS 0.46%Apr 1, 2026
- Medium6.3The ajax component was excluded from the default logged-in-user check in the administrative area.Check if you run itEPSS 0.26%Apr 1, 2026
- High8.6An improper access check allows unauthorized access to webservice endpoints.Check if you run itEPSS 0.41%Apr 1, 2026
- Medium5.9Lack of output escaping leads to a XSS vector in the multilingual associations component.Check if you run itEPSS 0.22%Apr 1, 2026
- Medium5.9Lack of output escaping for article titles leads to XSS vectors in various locations.Check if you run itEPSS 0.19%Apr 1, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows DOM-Based XSCheck if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to i_private dataCheck if you run itEPSS 0.15%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: beCheck if you run itEPSS 0.14%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: fix differential encoding verification Differential encoding allows loops to be created if it is abuseCheck if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix double free of ns_name in aa_replace_profiles() if ns_name is NULL after 1071 error = aa_unpack(udCheck if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verify_dfa() The verify_dfa() function only checks DEFAULCheck if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in match_char() macro usage The match_char() macro evaluates its character parametCheck if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: fix: limit the number of levels of policy namespaces Currently the number of policy namespaces is notCheck if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion whenCheck if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets on every call, leaking the namespace string allocatCheck if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Adjust KVM's sanity check against ovCheck if you run itEPSS 0.17%Apr 1, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPCheck if you run itEPSS 0.19%Apr 1, 2026
- Medium6.9A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8.Check if you run itEPSS 0.39%Apr 1, 2026
- Critical10.0A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the internal Dqlite database cluster fails to perform proper TLS clieCheck if you run itEPSS 0.39%Apr 1, 2026
- High7.1PowerStore, contains a Path Traversal vulnerability in the Service user.Check if you run itEPSS 0.12%Apr 1, 2026
- Medium5.3A vulnerability was determined in AutohomeCorp frostmourne up to 1.0.Check if you run itEPSS 0.21%Apr 1, 2026
- High7.2Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('PatCheck if you run itEPSS 0.40%Apr 1, 2026
- High7.5A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved t…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium6.9A vulnerability was found in Sanster IOPaint 1.5.3.Check if you run itEPSS 0.64%Apr 1, 2026
- Medium5.5A vulnerability has been found in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.34%Apr 1, 2026
Sort