Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: tipc: serialize udp bearer replicast list updates tipc_udp_rcast_add() and cleanup_bearer() both up…Check if you run itEPSS 0.13%Aug 10, 2026
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 0.59%Aug 6, 2026
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 97.34%Aug 6, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 14.62%Aug 2, 2026
- Unknownwpmanageninja ninja_tables Embedded Malicious CodePatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodePatch nowKEVEPSS 0.67%Aug 1, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 7.88%Aug 1, 2026
- UnknownMicrosoft Windows Group Policy Elevation of Privilege VulnerabilityPatch nowKEVEPSS 6.40%Jul 30, 2026
- Unknownbalbooa gridbox Improper Access ControlPatch nowKEVEPSS 0.52%Jul 29, 2026
- High7.1isofs: bound Rock Ridge symlink components to the SL recordCheck if you run itEPSS 0.17%Jul 25, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchCheck if you run itEPSS 0.21%Jul 24, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataCheck if you run itEPSS 0.39%Jul 21, 2026
- Critical9.4Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms allows a low-privileged authenticated baCheck this weekEPSS 55.00%Jul 20, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 77.97%Jul 19, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplCheck if you run itEPSS 0.29%Jul 6, 2026
- UnknownCacti Cacti Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 88.79%Jul 6, 2026
- UnknownIvanti automation SQL Injection: HibernatePatch nowKEVEPSS 0.90%Jul 2, 2026
- Medium5.5net: bonding: fix NULL pointer dereference in bond_do_ioctl()Check if you run itEPSS 0.12%Jul 1, 2026
- UnknownApache CouchDB Improper Input ValidationPatch nowKEVEPSS 12.16%Jun 30, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause…Check if you run itEPSS 0.13%Jun 25, 2026
- Unknownfossbilling fossbilling Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 1.91%Jun 25, 2026
- Critical9.6NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing.Check if you run itEPSS 0.35%Jun 18, 2026