Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center.Open the advisoryJul 21, 2026
- High8.0This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows.Open the advisoryJul 21, 2026
- Critical9.8PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Open the advisoryJul 21, 2026
- High8.1PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Open the advisoryJul 21, 2026
- Medium6.5PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Open the advisoryJul 21, 2026
- Critical9.4PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Open the advisoryJul 21, 2026
- High8.1PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Open the advisoryJul 21, 2026
- High8.8PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Open the advisoryJul 21, 2026
- High8.8PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Open the advisoryJul 21, 2026
- High8.1PraisonAI is a multi-agent teams system.Open the advisoryJul 21, 2026
- High7.1PraisonAI is a multi-agent teams system.Open the advisoryJul 21, 2026
- High7.8ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.38%Jul 21, 2026
- Medium4.3In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 / CWE-862) has been identified in the Direct Device Integration (DDI) Controller.Open the advisoryJul 21, 2026
- Low2.1A security flaw has been discovered in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead.Open the advisoryJul 21, 2026
- High8.6A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of googleapis/mcp-toolbox.Open the advisoryJul 21, 2026
- Low1.8A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.Open the advisoryJul 21, 2026
- Critical9.0Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host…Open the advisoryJul 21, 2026
- Critical9.3Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute f…Open the advisoryJul 21, 2026
- Low2.1Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media_image() method that allows attackers cont…Open the advisoryJul 21, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Open the advisoryJul 21, 2026
- High8.7PraisonAI is a multi-agent teams system.Open the advisoryJul 21, 2026
- Unknownlinux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilitieOpen the advisoryJul 21, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.04%Jul 21, 2026
- High7.8i2c: stub: Reject I2C block transfers with invalid lengthCheck if you run itEPSS 0.13%Jul 20, 2026
- High7.8netfilter: ipset: fix race between dump and ip_set_list resizeCheck if you run itEPSS 0.10%Jul 20, 2026
Sort