Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash…Check if you run itEPSS 0.42%Jul 17, 2026
- Critical9.3Sangoma Switchvox SQL Injection VulnerabilityPatch nowKEVEPSS 18.98%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityPatch nowKEVEPSS 5.32%Jul 17, 2026
- High8.8The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (OA) SPI mode by co…Check if you run itEPSS 0.42%Jul 15, 2026
- High7.1In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init() in kernel/pipe.c used K_SYSCALL_OBJ() (which requires the kernel object to…Check if you run itEPSS 0.16%Jul 14, 2026
- High8.2Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List VulnerabilityOpen the advisoryJul 14, 2026
- Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityPatch nowKEVEPSS 69.54%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 3.04%Jul 14, 2026
- UnknownBoldGrid w3_total_cache Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.86%Jul 14, 2026
- UnknownCross-Site Scripting in Domain parameterCheck if you run itEPSS 0.24%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 15.87%Jul 14, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.01%Jul 14, 2026
- High7.8Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 0.35%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- Medium5.5PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell CommandsCheck if you run itEPSS 0.18%Jul 13, 2026
- High7.5A flaw was found in the vllm-orchestrator-gateway component.Check if you run itEPSS 0.52%Jul 13, 2026
- Medium4.6The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numake…Check if you run itEPSS 0.23%Jul 12, 2026
- High7.8Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated…Check if you run itEPSS 0.15%Jul 12, 2026
- Critical9.8parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buff…Check if you run itEPSS 0.65%Jul 12, 2026
- Medium5.0The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drivers/wifi/nrf_wifi/src/wifi_mgmt.c copied TWT (Target Wake Time) flow…Check if you run itEPSS 0.22%Jul 12, 2026
- Medium6.4The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single fil…Check if you run itEPSS 0.25%Jul 11, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026
- Critical9.3A flaw was found in the file_type content detector of guardrails-detectors.Check if you run itEPSS 0.54%Jul 10, 2026
- UnknownVeeam veeam_backup_\&_replication Deserialization of Untrusted DataPatch nowKEVEPSS 0.61%Jul 10, 2026
- Unknownmailoptin mailoptin Incorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Jul 9, 2026
Sort