Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting the horizon…Check if you run itEPSS 0.16%May 1, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.34%Apr 30, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.24%Apr 30, 2026
- Medium5.3IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.22%Apr 30, 2026
- Medium6.8CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50.Check if you run itEPSS 0.13%Apr 30, 2026
- Medium6.8CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.14%Apr 30, 2026
- Medium5.9CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.13%Apr 30, 2026
- High8.5CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.15%Apr 30, 2026
- High7.5Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0…Check if you run itEPSS 0.81%Apr 30, 2026
- High7.3A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections.Check if you run itEPSS 0.33%Apr 29, 2026
- Medium6.8Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.15%Apr 29, 2026
- High7.8Local privilege escalation due to improper input validation.Check if you run itEPSS 0.16%Apr 29, 2026
- High7.8Local privilege escalation due to improper input validation.Check if you run itEPSS 0.16%Apr 29, 2026
- Medium6.7Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.13%Apr 29, 2026
- High7.7Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers.Check if you run itEPSS 0.99%Apr 29, 2026
- High7.7Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables.Check if you run itEPSS 0.72%Apr 29, 2026
- Medium5.3Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.Check if you run itEPSS 0.34%Apr 29, 2026
- High8.8Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially p…Check if you run itEPSS 0.32%Apr 28, 2026
- High7.5Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.28%Apr 28, 2026
- Medium4.3Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.26%Apr 28, 2026
- Medium6.0If is given a ZIP archive with an absolute Windows path containing a drive ( ) then the archive will be extracted outside the target directory which is different than…Check if you run itEPSS 0.73%Apr 27, 2026
- High7.3Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1Check if you run itEPSS 0.37%Apr 27, 2026
- Medium5.1There is a cypher injection issue in LogonTracer prior to v2.0.0.Check if you run itEPSS 0.30%Apr 27, 2026
- High8.8SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.20%Apr 24, 2026
- Medium4.3Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.30%Apr 24, 2026