Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire IdentityCheck if you run itEPSS 0.51%Sep 3, 2026
- High8.8A flaw was found in the SFTP backend in gvfs.Check if you run itEPSS 0.36%Sep 1, 2026
- High8.1Trilium is an open-source hierarchical note-taking application.Check if you run itEPSS 0.52%Aug 27, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.Check if you run itEPSS 0.25%Aug 27, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.Check if you run itEPSS 0.25%Aug 27, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.Check if you run itEPSS 0.25%Aug 27, 2026
- UnknownRed Hat build_of_keycloak Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 3.18%Aug 25, 2026
- High8.8RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view.Check if you run itEPSS 0.44%Aug 24, 2026
- High8.8The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL…Check if you run itEPSS 0.49%Aug 24, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.Check if you run itEPSS 0.43%Aug 24, 2026
- Medium6.5A flaw was found in JSS (Java Security Services).Check if you run itEPSS 0.18%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- High8.5DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, inc…Check if you run itEPSS 0.24%Aug 24, 2026
- High8.7The HTTP media server running on DJI drones serves stored photos and videos through the endpoint without authenticating the requesting client.Check if you run itEPSS 0.41%Aug 24, 2026
- Medium5.3Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line.Check if you run itEPSS 0.42%Aug 23, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied event type ind…Check if you run itEPSS 0.19%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdev_pass_values() In evdev_pass_values(), the input_event…Check if you run itEPSS 0.18%Aug 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentic…Check if you run itEPSS 0.29%Aug 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb_clientid_arr A dibs device interrupt handler can be active after d…Check if you run itEPSS 0.38%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs->lock in dibs_dev_alloc() dibs->lock is initialised by dibs_dev_add(), but a…Check if you run itEPSS 0.65%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_try_adding_channels() cifs_try_adding_channels() takes a te…Check if you run itEPSS 0.48%Aug 22, 2026
- Critical9.1Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them.Check if you run itEPSS 0.50%Aug 22, 2026
- Medium6.3Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerab…Check if you run itEPSS 0.25%Aug 22, 2026
- High8.7Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.O…Check if you run itEPSS 0.15%Aug 22, 2026
- High7.4WeeChat (Wee Enhanced Environment for Chat) is a free chat client.Check if you run itEPSS 0.43%Aug 21, 2026