Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownI was reporter #11 for a WPForms PayPal webhook vulnerability (CVE-2026-4986) : r/netsecCheck if you run itEPSS 0.20%Jul 25, 2026
- UnknownCVE-2026-50458: Finding a UAF in the Windows Brokering File System : r/netsecCheck if you run itEPSS 0.26%Jul 25, 2026
- Unknown@actions/artifact has an Arbitrary File Write via artifact extraction · CVE-2024-42471 · GitHub Advisory Database · GitHubCheck if you run itEPSS 3.22%Jul 24, 2026
- UnknownNext.js has a Cache poisoning vulnerability due to omission of the Vary header · CVE-2025-49005 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.49%Jul 24, 2026
- UnknownServer-Side Request Forgery in node-pdf-generator · CVE-2020-7740 · GitHub Advisory Database · GitHubCheck if you run itEPSS 2.04%Jul 24, 2026
- UnknownPyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, data: schemes · CVE-2026-48522 · GitHub Advisory Database…Check if you run itEPSS 2.23%Jul 24, 2026
- UnknownGitHub - xffsec/CVE-2024-24590-ClearML-RCE-Exploit · GitHubCheck if you run itEPSS 2.47%Jul 24, 2026
- UnknownArbitrary File Write via Archive Extraction (Zip Slip) in github.com/ollama/ollama/server | CVE-2024-45436 | SnykCheck if you run itEPSS 2.56%Jul 24, 2026
- UnknownRemote code execution in mlflow · CVE-2024-0520 · GitHub Advisory Database · GitHubCheck if you run itEPSS 2.40%Jul 24, 2026
- UnknownInside CVE-2025-1550: Remote Code Execution via Keras Models - Huntr | BlogCheck if you run itEPSS 2.63%Jul 24, 2026
- UnknownCVE-2025-23303: Nvidia Nemo Framework RCE VulnerabilityCheck if you run itEPSS 0.58%Jul 24, 2026
- UnknownCVE-2024-0964: Gradio Path Traversal VulnerabilityCheck if you run itEPSS 0.96%Jul 24, 2026
- UnknownCVE-2025-49847: Llama.cpp Buffer Overflow VulnerabilityCheck if you run itEPSS 0.52%Jul 24, 2026
- UnknownCritical RCE in BentoML Runner Server: Deep Dive into CVE-2025-32375 - ZeroPath Blog | ZeroPathCheck this weekEPSS 52.41%Jul 24, 2026
- UnknownAdvisory: Privilege Escalation via Service Binary Hijacking in Vivavis HIGH-LEIT (CVE-2024-38456) - SCHUTZWERKCheck if you run itEPSS 0.24%Jul 24, 2026
- UnknownCVE-2019-14806 - Red Hat Customer PortalCheck if you run itEPSS 1.91%Jul 24, 2026
- Unknownewen-lbh/ffcss Late-Unicode normalization vulnerability · CVE-2023-52081 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.52%Jul 24, 2026
- UnknownThe OWASP ModSecurity Core Rule Set (CRS) is affected by...Check if you run itEPSS 1.21%Jul 24, 2026
- UnknownCVE-2024-56523: Radware Cloud WAF Auth Bypass VulnerabilityCheck if you run itEPSS 0.60%Jul 24, 2026
- UnknownTwig: PHP code injection via template name · CVE-2026-46633 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.69%Jul 24, 2026
- UnknownCVE-2026-46640: Arbitrary PHP code execution via macro-reference compilation (Symfony Blog)Check if you run itEPSS 0.64%Jul 24, 2026
- UnknownGadget chain in Symfony 1 due to vulnerable Swift Mailer dependency · CVE-2024-28859 · GitHub Advisory Database · GitHubCheck if you run itEPSS 1.49%Jul 24, 2026
- UnknownCommand Injection via Unsanitized Output in — systeminformation · CVE-2026-26318 · GitHub Advisory Database · GitHubCheck if you run itEPSS 1.28%Jul 24, 2026
- UnknownGitHub - mbadanoiu/CVE-2022-25813: CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz · GitHubCheck this weekEPSS 67.26%Jul 24, 2026
- UnknownCritical PHP Object Injection in WordPress eCommerce//Published on 2026-02-15//CVE-2026-1235 - WP-FirewallCheck if you run itEPSS 0.31%Jul 24, 2026
Sort