Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compound_op() If a server sends a truncated response but…Check if you run itEPSS 0.65%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: use kzalloc to zero-initialize security descriptor buffer Commit 62e7dd0a39c2d ("smb:…Check if you run itEPSS 0.16%May 28, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofs_export_iget isofs_fh_to_dentry() and iso…Check if you run itEPSS 0.48%May 28, 2026
- Critical9.8A flaw was found in Samba.Check if you run itEPSS 1.75%May 28, 2026
- Medium5.1Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the site parame…Check if you run itEPSS 0.32%May 28, 2026
- Medium5.1Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the showSupport…Check if you run itEPSS 0.32%May 28, 2026
- Medium4.3The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) plugin for WordPress is vulnerable to Cross-Site Reque…Check if you run itEPSS 0.20%May 28, 2026
- Medium6.1The Easy Updates Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'paged' parameter in versions up to, and including, 9.0.20 This i…Check if you run itEPSS 0.35%May 28, 2026
- Medium5.3A flaw was found in Keycloak's ClientRegistrationAuth component.Check if you run itEPSS 0.72%May 28, 2026
- Medium4.3A flaw was found in Keycloak, an open-source identity and access management solution.Check if you run itEPSS 0.49%May 28, 2026
- Medium4.3The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7.Check if you run itEPSS 0.20%May 28, 2026
- High7.3A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature.Check if you run itEPSS 0.49%May 28, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.57%May 28, 2026
- Medium6.5A flaw was found in Keycloak's Client Policies, specifically within the component.Check if you run itEPSS 0.46%May 28, 2026
- High7.5The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.5, <7.13.8, and <7.10.12 accepts a client-supplied I…Check if you run itEPSS 0.48%May 28, 2026
- Critical9.1IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability.Check if you run itEPSS 0.50%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does no bound checking on the numbe…Check if you run itEPSS 0.13%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes Currently, the nameserver doesn't limit the number o…Check if you run itEPSS 0.13%May 27, 2026
- High7.0Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an inter…Check if you run itEPSS 0.35%May 27, 2026
- Medium5.3Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections.Check if you run itEPSS 0.40%May 26, 2026
- High8.1epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.Check if you run itEPSS 0.19%May 26, 2026
- High8.1epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.Check if you run itEPSS 0.16%May 26, 2026
- Medium6.5epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.Check if you run itEPSS 0.24%May 26, 2026
- High7.4epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.Check if you run itEPSS 0.15%May 26, 2026
- Critical9.9Lumiverse is a full-featured AI chat application.Check if you run itEPSS 0.68%May 26, 2026