Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell CommandsCheck if you run itEPSS 0.18%Jul 13, 2026
- High7.5A flaw was found in the vllm-orchestrator-gateway component.Check if you run itEPSS 0.52%Jul 13, 2026
- Medium4.6The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numake…Check if you run itEPSS 0.23%Jul 12, 2026
- High7.8Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated…Check if you run itEPSS 0.15%Jul 12, 2026
- Critical9.8parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buff…Check if you run itEPSS 0.65%Jul 12, 2026
- Medium5.0The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drivers/wifi/nrf_wifi/src/wifi_mgmt.c copied TWT (Target Wake Time) flow…Check if you run itEPSS 0.22%Jul 12, 2026
- Medium6.4The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single fil…Check if you run itEPSS 0.25%Jul 11, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026
- Critical9.3A flaw was found in the file_type content detector of guardrails-detectors.Check if you run itEPSS 0.54%Jul 10, 2026
- UnknownVeeam veeam_backup_\&_replication Deserialization of Untrusted DataPatch nowKEVEPSS 0.61%Jul 10, 2026
- Unknownmailoptin mailoptin Incorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Jul 9, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.09%Jul 9, 2026
- UnknownHCSEC-2026-22 - Nomad vulnerable to cross-namespace host volume claim deletionCheck if you run itEPSS 0.25%Jul 8, 2026
- Low2.1LiteLLM LiteLLM Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.90%Jul 8, 2026
- UnknownHCSEC-2026-21 - Nomad vulnerable to sandbox escape in Docker task driverCheck if you run itEPSS 0.49%Jul 8, 2026
- UnknownHCSEC-2026-19 - Nomad Docker driver vulnerable to host namespace bypass on LinuxCheck if you run itEPSS 0.34%Jul 8, 2026
- UnknownHCSEC-2026-18 - Memberlist vulnerable to denial of service via gossip messageCheck if you run itEPSS 0.25%Jul 8, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionCheck if you run itEPSS 0.38%Jul 8, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityPatch nowKEVEPSS 0.84%Jul 8, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 14.85%Jul 8, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 2.05%Jul 8, 2026
- High7.7Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise in github.com/zhenorzz/goployCheck if you run itEPSS 0.35%Jul 7, 2026
- Low3.7A logic vulnerability was found in GStreamer's webrtcbin component.Check if you run itEPSS 0.23%Jul 7, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.04%Jul 7, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplCheck if you run itEPSS 0.29%Jul 6, 2026
Sort