Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.Check if you run itEPSS 0.14%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_page in rb_m…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in process_metadata_update The function process_metadata_u…Check if you run itEPSS 0.12%May 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Commit a4e772898f8b ("PCI: Add missing bridge lock to pc…Check if you run itEPSS 0.14%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits for invalid metabox-enabled images Crafted EROFS images with metad…Check if you run itEPSS 0.16%May 6, 2026
- Medium6.9Gotenberg is an API-based document conversion tool.Check if you run itEPSS 0.31%May 5, 2026
- Medium5.3Incus is an open source container and virtual machine manager.Check if you run itEPSS 0.29%May 5, 2026
- High7.8Gotenberg is an API-based document conversion tool.Check if you run itEPSS 2.11%May 5, 2026
- Critical9.2PhpSpreadsheet is a library for reading and writing spreadsheet files.Check if you run itEPSS 0.78%May 5, 2026
- High8.3Twenty is an open source CRM built with NestJS (Node.js).Check if you run itEPSS 0.37%May 5, 2026
- Medium5.3Vaultwarden is a Bitwarden-compatible server written in Rust.Check if you run itEPSS 0.19%May 5, 2026
- High8.6In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests.Check if you run itEPSS 0.55%May 5, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths During code review, Joseph found that…Check if you run itEPSS 0.16%May 5, 2026
- Critical9.3OpenClaw before 2026.4.10 contains an input validation vulnerability that allows external hook metadata to be enqueued as trusted system events.Check if you run itEPSS 0.30%May 5, 2026
- Medium6.3OpenClaw before 2026.4.14 contains a server-side request forgery vulnerability in browser SSRF policy that allows private-network navigation by default.Check if you run itEPSS 0.50%May 5, 2026
- Medium6.5The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.47%May 5, 2026
- High7.2The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in the wpr_update_form_action_meta AJAX action…Check if you run itEPSS 0.42%May 5, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthen…Check if you run itEPSS 4.10%May 4, 2026
- Medium6.0Beets is the media library management system.Check if you run itEPSS 0.53%May 4, 2026
- Critical9.4In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read.Check if you run itEPSS 0.59%May 4, 2026
- Critical9.4In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause t…Check if you run itEPSS 0.72%May 4, 2026
- Critical9.4Apache Polaris accepts literal characters in namespace and table names.Check if you run itEPSS 0.69%May 4, 2026
- Critical9.4Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved.Check if you run itEPSS 0.58%May 4, 2026
- Critical9.8Evolver is a GEP-powered self-evolving engine for AI agents.Check if you run itEPSS 2.56%May 4, 2026
- Unknownmetagauss registrationmagic Improper Privilege ManagementPatch nowKEVEPSS 1.65%May 4, 2026