Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityPatch nowKEVEPSS 69.54%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityPatch nowKEVEPSS 0.84%Jul 8, 2026
- Critical9.8stale proxy password leakCheck if you run itEPSS 1.06%Jul 3, 2026
- High7.5incomplete mTLS config matching in conn reuseCheck if you run itEPSS 0.40%Jul 3, 2026
- Critical9.8cross-origin Digest auth state leakCheck if you run itEPSS 0.69%Jul 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request…Check if you run itEPSS 0.21%Jun 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from th…Check if you run itEPSS 0.16%Jun 24, 2026
- High7.0libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handlingCheck if you run itEPSS 0.36%Jun 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period.Check if you run itEPSS 0.14%Jun 19, 2026
- Critical9.3PTC Windchill and FlexPLM Improper Input Validation VulnerabilityPatch nowKEVEPSS 46.05%Jun 17, 2026
- High7.8Linux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 0.64%Jun 16, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.68%Jun 10, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityPatch nowKEVEPSS 99.91%Jun 9, 2026
- Critical9.8Improper Privilege ManagementPatch nowKEVEPSS 1.28%Jun 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) clea…Check if you run itEPSS 4.39%May 30, 2026
- Critical9.9A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine.Check if you run itEPSS 0.57%May 29, 2026
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.39%May 29, 2026
- High8.8Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.32%May 28, 2026
- Critical9.1In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that…Check if you run itEPSS 0.23%May 28, 2026
- High7.5Casdoor versions 2.362.0 and earlier do not enforce SAML assertion time bounds.Check if you run itEPSS 0.33%May 28, 2026
- High8.1Casdoor versions 2.362.0 and earlier map SAML assertions to user sessions without replay protection.Check if you run itEPSS 0.30%May 28, 2026
- Critical9.8In Casdoor versions 2.362.0 and earlier, the SAML service provider implementation does not validate the AudienceRestriction element in SAML assertions.Check if you run itEPSS 0.36%May 28, 2026
- Medium4.2PyJWT is a JSON Web Token implementation in Python.Check if you run itEPSS 0.22%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU s…Check if you run itEPSS 0.14%May 28, 2026
Sort