Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.61%Jul 12, 2026
- Medium5.3A vulnerability was detected in AojiaoZero Antaris 1.0.Check if you run itEPSS 0.32%Jul 12, 2026
- Low2.1A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2.Check if you run itEPSS 0.35%Jul 12, 2026
- Critical9.4LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup.Check if you run itEPSS 1.62%Jul 12, 2026
- High8.7luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests.Check if you run itEPSS 0.36%Jul 12, 2026
- High8.7OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users to execute the Samba daemon with caller-controll…Check if you run itEPSS 0.88%Jul 12, 2026
- Low2.1A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2.Check if you run itEPSS 0.37%Jul 12, 2026
- Low2.1A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2.Check if you run itEPSS 0.35%Jul 12, 2026
- Medium6.9A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa45ce12c.Check if you run itEPSS 0.41%Jul 12, 2026
- Medium6.4The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single fil…Check if you run itEPSS 0.25%Jul 11, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026
- Critical9.3A flaw was found in the file_type content detector of guardrails-detectors.Check if you run itEPSS 0.54%Jul 10, 2026
- High8.7PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to execute restricted commands via find's b…Check if you run itEPSS 0.73%Jul 10, 2026
- Medium6.9PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (praisonaiagents.context.fast).Check if you run itEPSS 0.34%Jul 10, 2026
- Medium6.8PraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to validate include paths in .praisoncontext and .praisoninclude files.Check if you run itEPSS 0.37%Jul 10, 2026
- Medium6.9PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs endpoint.Check if you run itEPSS 0.30%Jul 10, 2026
- Medium6.9PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.toml when constructing an Agent, and does not…Check if you run itEPSS 0.20%Jul 10, 2026
- Medium6.9PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring thre…Check if you run itEPSS 0.27%Jul 10, 2026
- High8.1In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checksCheck if you run itEPSS 0.35%Jul 10, 2026
- Medium6.1In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possibleCheck if you run itEPSS 0.34%Jul 10, 2026
- Medium5.4In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported dataCheck if you run itEPSS 0.32%Jul 10, 2026
- High8.8In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integrationCheck if you run itEPSS 0.49%Jul 10, 2026
- Critical9.8In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possibleCheck if you run itEPSS 0.60%Jul 10, 2026
- Low3.5In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possibleCheck if you run itEPSS 0.23%Jul 10, 2026
- Medium5.3n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file upload endpoint.Check if you run itEPSS 0.39%Jul 10, 2026
Sort