Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-24747: PyTorch weights_only RCE VulnerabilityCheck if you run itEPSS 0.80%Jul 24, 2026
- UnknownLaravel Redis Horizontal Scaling Insecure Deserialization · CVE-2026-23524 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.98%Jul 24, 2026
- UnknownHeroDevs Blog | CVE-2026-0603: Second-Order SQL Injection in Hibernate UPDATE/DELETE (InlineIdsOrClauseBuilder)Check if you run itEPSS 1.03%Jul 24, 2026
- UnknownActive Storage allowed transformation methods that were potentially unsafe · CVE-2025-24293 · GitHub Advisory Database · GitHubCheck if you run itEPSS 5.58%Jul 24, 2026
- UnknownSecurity Update: CVE-2026-30623 — Command Injection via Anthropic's MCP SDK | liteLLMCheck if you run itEPSS 5.00%Jul 24, 2026
- UnknownModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected...Check if you run itEPSS 0.69%Jul 24, 2026
- UnknownCVE-2023-35636 - Security Update Guide - Microsoft - Microsoft Outlook Information Disclosure VulnerabilityCheck this weekEPSS 17.70%Jul 24, 2026
- UnknownCVE Record: CVE-2024-45809Check if you run itEPSS 0.39%Jul 24, 2026
- UnknownEnvoy API Security Vulnerabilities: CVE-2024-45806, 45809, 45810Check if you run itEPSS 0.38%Jul 24, 2026
- UnknownCVE-2026-45034: PhpSpreadsheet RCE Patch Bypass | Orca SecurityCheck if you run itEPSS 0.46%Jul 24, 2026
- UnknownBy Executive Order, We Are Banning Blacklists - Domain-Level RCE in Veeam Backup & Replication (CVE-2025-23120)Check this weekEPSS 24.00%Jul 24, 2026
- UnknownElectron context isolation bypass via nested unserializable return value · CVE-2023-29198 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.59%Jul 24, 2026
- UnknownCross-site Scripting in Apache superset · CVE-2023-49657 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.84%Jul 24, 2026
- UnknownGitHub - BiiTts/CVE-2026-46490-samlify-SAML-Attribute-Injection: CVE-2026-46490 — samlify signed-assertion privilege escalation.Check if you run itEPSS 0.47%Jul 24, 2026
- UnknownOmni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token · CVE-2026-45720 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.14%Jul 24, 2026
- UnknownCVE-2026-41005 - UAA accepts SAML Encrypted Assertions authentication bypass | Cloud FoundryCheck if you run itEPSS 0.13%Jul 24, 2026
- UnknownCVE-2022-29174 - Predictable password reset token may lead to account takeover in countly-serverCheck if you run itEPSS 1.48%Jul 24, 2026
- UnknownAuthlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type · CVE-2026-41479 · GitHub Advis…Check if you run itEPSS 0.26%Jul 24, 2026
- UnknownFast-JWT Improperly Validates iss Claims · CVE-2025-30144 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.59%Jul 24, 2026
- Unknownalibaba fastjson Improper Input ValidationPatch nowKEVEPSS 0.66%Jul 23, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 3.52%Jul 19, 2026
- Critical9.8IBM Langflow Code Injection VulnerabilityPatch nowKEVEPSS 28.66%Jul 17, 2026
- Critical9.3Sangoma Switchvox SQL Injection VulnerabilityPatch nowKEVEPSS 18.98%Jul 17, 2026
- Critical9.8WordPress Core Interpretation Conflict VulnerabilityPatch nowKEVEPSS 10.65%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityPatch nowKEVEPSS 5.32%Jul 17, 2026
Sort