Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix state inconsistency on gadget init failure When cdns3_gadget_start() fails,…Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: comedi: runflags cannot determine whether to reclaim chanlist syzbot reported a memory leak [1], be…Check if you run itEPSS 0.14%May 1, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger When a durable file handle su…Check if you run itEPSS 0.65%May 1, 2026
- High7.5Apache Neethi does not properly detect circular references in policy definitions.Check if you run itEPSS 0.80%May 1, 2026
- High7.5IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods withou…Check if you run itEPSS 0.19%Apr 30, 2026
- Medium5.9Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely.Check if you run itEPSS 0.52%Apr 30, 2026
- High8.1When processing the header of an incoming message, libnv failed to properly validate the message size.Check if you run itEPSS 0.40%Apr 30, 2026
- Critical9.1Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.Check if you run itEPSS 0.52%Apr 29, 2026
- High8.4Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption.Check if you run itEPSS 0.22%Apr 29, 2026
- Critical9.0Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for…Check if you run itEPSS 0.50%Apr 29, 2026
- High7.5Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence.Check if you run itEPSS 0.54%Apr 29, 2026
- Medium5.8OpenClaw before 2026.3.31 fails to properly sanitize PIP_INDEX_URL and UV_INDEX_URL environment variables in host execution contexts, allowing attackers to redirect Py…Check if you run itEPSS 0.17%Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders.Check if you run itEPSS 0.26%Apr 28, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the /phone arm and /phone disarm endpoints that fails to properly enforce operator.admin sc…Check if you run itEPSS 0.48%Apr 28, 2026
- High8.9Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint.Check if you run itEPSS 0.41%Apr 28, 2026
- High8.6NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending pr…Check if you run itEPSS 0.40%Apr 28, 2026
- Medium5.4Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality.Check if you run itEPSS 0.29%Apr 28, 2026
- High8.5Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests conta…Check if you run itEPSS 0.26%Apr 28, 2026
- Medium5.3Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.Check if you run itEPSS 0.24%Apr 28, 2026
- Medium5.4The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks…Check if you run itEPSS 0.25%Apr 28, 2026
- High8.6In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.Check if you run itEPSS 0.39%Apr 28, 2026
- High7.5A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n.Check if you run itEPSS 0.49%Apr 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edac_mc_alloc() When the mci->pvt_info allocation in edac_mc_al…Check if you run itEPSS 0.16%Apr 27, 2026
- Medium5.1ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to proper…Check if you run itEPSS 0.32%Apr 27, 2026
- High7.5Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters.Check if you run itEPSS 0.69%Apr 27, 2026