Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 0.33%Aug 11, 2026
- High8.6Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityPatch nowKEVEPSS 1.01%Aug 11, 2026
- High8.4tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supp…Check if you run itEPSS 0.17%Aug 10, 2026
- Critical9.3react18-use is a React 19 use hook shim.Check if you run itEPSS 0.67%Aug 10, 2026
- Low2.5The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP bloc…Check if you run itEPSS 0.10%Aug 10, 2026
- Low3.7The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths.Check if you run itEPSS 0.40%Aug 10, 2026
- Medium4.3Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.33%Aug 10, 2026
- Medium5.4Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.22%Aug 10, 2026
- Medium5.9AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.35%Aug 10, 2026
- Medium5.3npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary termi…Check if you run itEPSS 0.37%Aug 10, 2026
- High7.2unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before valid…Check if you run itEPSS 0.59%Aug 10, 2026
- High7.3Kitty is a cross-platform GPU based terminal.Check if you run itEPSS 0.21%Aug 10, 2026
- Medium4.3CyberChef is a web app for encryption, encoding, compression, and data analysis.Check if you run itEPSS 0.32%Aug 10, 2026
- Critical9.9ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.72%Aug 10, 2026
- High7.1ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.50%Aug 10, 2026
- High7.1ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.47%Aug 10, 2026
- Medium6.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.51%Aug 10, 2026
- Medium6.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.44%Aug 10, 2026
- Medium4.3ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.35%Aug 10, 2026
- High8.1Tabby (formerly Terminus) is a highly configurable terminal emulator.Check if you run itEPSS 0.49%Aug 10, 2026
- Medium5.1SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via…Check if you run itEPSS 0.30%Aug 10, 2026
- Critical9.3react-tracked provides state usage tracking with Proxies.Check if you run itEPSS 0.67%Aug 10, 2026
- High8.8A flaw was found in odh-dashboard.Check if you run itEPSS 0.66%Aug 10, 2026
- High7.5The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) parses the JSON metadata returned by the update ser…Check if you run itEPSS 0.47%Aug 10, 2026
- Low3.7The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z_impl_updatehub_probe().Check if you run itEPSS 0.35%Aug 10, 2026
Sort