Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Document structural anomalies caused inconsistencies between page element relationships and internal index states.Check if you run itEPSS 0.17%Apr 27, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.Check if you run itEPSS 7.16%Apr 27, 2026
- UnknownQinglong Case-sensitive Path Matching Authentication BypassPatch nowKEVApr 26, 2026
- High8.7Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote aut…Check if you run itEPSS 0.97%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_single() fails…Check if you run itEPSS 0.17%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAI…Check if you run itEPSS 0.17%Apr 24, 2026
- Medium4.6In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 A malicious USB device with the TASCA…Check if you run itEPSS 0.27%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW…Check if you run itEPSS 0.17%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNameLength from the cli…Check if you run itEPSS 0.58%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc The kernel ASN.1 BER decoder c…Check if you run itEPSS 0.14%Apr 24, 2026
- Medium6.1Mahara before 25.04.2 and 24.04.11 are vulnerable to displaying results that can trigger XSS via a malicious search query string.Check if you run itEPSS 0.19%Apr 24, 2026
- Medium5.3The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 9.1.2.Check if you run itEPSS 0.52%Apr 24, 2026
- High7.1OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips.Check if you run itEPSS 0.46%Apr 23, 2026
- High7.5CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.Check if you run itEPSS 0.51%Apr 23, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.33%Apr 23, 2026
- Medium6.6The mv utility in uutils coreutils improperly handles directory trees containing symbolic links during moves across filesystem boundaries.Check if you run itEPSS 0.19%Apr 22, 2026
- Medium6.6The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails.Check if you run itEPSS 0.13%Apr 22, 2026
- Low3.3The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable.Check if you run itEPSS 0.15%Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly rel…Check if you run itEPSS 0.80%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB_I_NO_DATA_IN…Check if you run itEPSS 0.16%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Replace BUG_ON() with pro…Check if you run itEPSS 0.13%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is disabled If reporting errors to the event log is n…Check if you run itEPSS 0.16%Apr 22, 2026
- Critical9.8The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests' function in all versions up to, and including, 1.0.20.Check if you run itEPSS 0.67%Apr 22, 2026
- Medium6.4The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and incl…Check if you run itEPSS 0.33%Apr 22, 2026
- Medium6.9RansomLook is a tool to monitor Ransomware groups and markets and extract their victims.Check if you run itEPSS 0.44%Apr 21, 2026