Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 5.09%Jul 9, 2026
- UnknownHCSEC-2026-22 - Nomad vulnerable to cross-namespace host volume claim deletionCheck if you run itEPSS 0.25%Jul 8, 2026
- Low2.1LiteLLM LiteLLM Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.90%Jul 8, 2026
- UnknownHCSEC-2026-21 - Nomad vulnerable to sandbox escape in Docker task driverCheck if you run itEPSS 0.49%Jul 8, 2026
- UnknownHCSEC-2026-19 - Nomad Docker driver vulnerable to host namespace bypass on LinuxCheck if you run itEPSS 0.34%Jul 8, 2026
- UnknownHCSEC-2026-18 - Memberlist vulnerable to denial of service via gossip messageCheck if you run itEPSS 0.25%Jul 8, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionCheck if you run itEPSS 0.38%Jul 8, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityPatch nowKEVEPSS 0.84%Jul 8, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 14.85%Jul 8, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 2.05%Jul 8, 2026
- High7.7Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise in github.com/zhenorzz/goployCheck if you run itEPSS 0.35%Jul 7, 2026
- Low3.7A logic vulnerability was found in GStreamer's webrtcbin component.Check if you run itEPSS 0.23%Jul 7, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.04%Jul 7, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplCheck if you run itEPSS 0.29%Jul 6, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026
- Low2.1swoosh has email-derived URL path injection in Microsoft Graph endpointCheck if you run itEPSS 0.20%Jul 6, 2026
- UnknownHeap-buffer-overflow in Assimp::D3MF::D3MFExporter::writeFacesOpen the advisoryJul 6, 2026
- Medium5.3Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which…Check if you run itEPSS 0.40%Jul 5, 2026
- Medium4.6The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endpoint buffer in its OUT and IN transfer-completi…Check if you run itEPSS 0.28%Jul 5, 2026
- High7.8Linux Kernel Unspecified VulnerabilityPatch nowKEVEPSS 0.71%Jul 4, 2026
- High7.3A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.Check if you run itEPSS 0.37%Jul 3, 2026
- Critical9.1A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check.Check if you run itEPSS 0.66%Jul 3, 2026
- UnknownFlowiseAI Flowise External Control of File Name or PathPatch nowKEVEPSS 4.36%Jul 3, 2026
- Unknowncreativethemes blocksy_companion Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.57%Jul 2, 2026
- UnknownD-Link dir-823x_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 15.74%Jul 2, 2026
Sort