Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache Spark Improper AuthenticationPatch nowKEVEPSS 65.83%Jan 31, 2026
- UnknownWeaver e-cology Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 0.98%Jan 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_registers(), when usb_s…Check if you run itEPSS 0.14%Jan 23, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.43%Jan 22, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityPatch nowKEVEPSS 4.54%Jan 21, 2026
- Unknownmjobtime mjobtime Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.00%Jan 21, 2026
- Unknownappspace appspace Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 61.27%Jan 21, 2026
- UnknownOut-of-bounds WritePatch nowKEVEPSS 1.30%Jan 20, 2026
- Low3.7A flaw was found in Keycloak.Check if you run itEPSS 0.45%Jan 15, 2026
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.54%Jan 15, 2026
- Unknownchanjetvip t\+ Deserialization of Untrusted DataPatch nowKEVEPSS 1.10%Jan 15, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_aead_encrypt is call…Check if you run itEPSS 0.30%Jan 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several crypto user API contexts…Check if you run itEPSS 0.15%Jan 14, 2026
- Unknownlanggenius dify Improper Access ControlPatch nowKEVEPSS 29.93%Jan 14, 2026
- Unknownepiserver episerver Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 4.65%Jan 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDP_TX action There is a crash issue when running ze…Check if you run itEPSS 0.29%Jan 13, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates a struct filename us…Check if you run itEPSS 0.22%Jan 13, 2026
- High8.0In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named princi…Check if you run itEPSS 0.45%Jan 13, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled…Check if you run itEPSS 0.55%Jan 13, 2026
- Critical9.1mindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.26%Jan 12, 2026
- High8.8Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.27%Jan 8, 2026
- Medium6.6CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.49%Jan 8, 2026
- Medium5.5RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.34%Jan 7, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.Check if you run itEPSS 1.33%Jan 7, 2026
- High7.5Frappe is a full-stack web application framework.Check if you run itEPSS 0.43%Jan 5, 2026
Sort