Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) and module.Check if you run itEPSS 0.88%May 7, 2026
- Low3.5Admidio is an open-source user management solution.Check if you run itEPSS 0.14%May 7, 2026
- Low2.7Admidio is an open-source user management solution.Check if you run itEPSS 0.33%May 7, 2026
- Medium6.5Admidio is an open-source user management solution.Check if you run itEPSS 0.31%May 7, 2026
- Medium5.9OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP.Check if you run itEPSS 0.43%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.44%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.44%May 6, 2026
- High8.5OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers.Check if you run itEPSS 0.16%May 6, 2026
- High8.3OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intend…Check if you run itEPSS 0.34%May 6, 2026
- High8.4OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside t…Check if you run itEPSS 0.39%May 6, 2026
- High8.7OpenClaw before 2026.4.10 contains an insufficient environment variable denylist vulnerability in its exec environment policy that allows operator-supplied overrides o…Check if you run itEPSS 0.72%May 6, 2026
- Medium6.0OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to per…Check if you run itEPSS 0.38%May 6, 2026
- High7.1Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.21%May 6, 2026
- High7.5Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q.Check if you run itEPSS 1.87%May 6, 2026
- Medium4.3A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks.Check if you run itEPSS 0.13%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_object() The ceph_zero_partial_object function w…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix device cleanup order to prevent kernel panic Move video device unreg…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/sh_tmu: Always leave device running after probe The TMU device can be used as b…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions struct…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: Fix error handling on steps after finding a match Once an async connection is fo…Check if you run itEPSS 0.16%May 6, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty Back in commit 2a2b5932db6758 ("xfs: fix attr leaf…Check if you run itEPSS 0.68%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Move vbus draw to workqueue context Currently dwc3_gadget_vbus_draw() can be cal…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Prevent BUG_ON by validating rounded allocation When DRM_BUDDY_CONTIGUOUS_ALLOCATION is…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix circular locking dependency in run_unpack_ex Syzbot reported a circular locking dependen…Check if you run itEPSS 0.12%May 6, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_ref race between scrub and refill paths The io_zcrx_put_niov_uref() functio…Check if you run itEPSS 0.11%May 6, 2026