Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 2.44%Jun 8, 2026
- High8.6An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privileg…Check if you run itEPSS 0.50%Jun 5, 2026
- High7.8A flaw was found in ansible-core.Check if you run itEPSS 0.22%Jun 5, 2026
- Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityPatch nowKEVEPSS 85.44%Jun 5, 2026
- High8.8A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c).Check if you run itEPSS 0.32%Jun 4, 2026
- Medium6.3An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitation.c) leads to an out-of-bounds write.Check if you run itEPSS 0.26%Jun 4, 2026
- Critical9.2SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages.Check if you run itEPSS 0.54%Jun 4, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityPatch nowKEVEPSS 25.32%Jun 4, 2026
- High7.5SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityPatch nowKEVEPSS 43.65%Jun 4, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityPatch nowKEVEPSS 99.84%Jun 4, 2026
- Medium5.5A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08.Check if you run itEPSS 0.40%Jun 3, 2026
- Low1.1A vulnerability was determined in sgl-project SGLang up to 0.5.11.Check if you run itEPSS 0.12%Jun 3, 2026
- High7.7OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.Check if you run itEPSS 0.26%Jun 3, 2026
- Medium5.3Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.3Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSuppo…Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.5A vulnerability was found in crmeb crmeb_java 1.4.Check if you run itEPSS 0.29%Jun 3, 2026
- High7.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.11%Jun 3, 2026
- High7.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.11%Jun 3, 2026
- High7.3Local privilege escalation due to EXE hijacking vulnerability.Check if you run itEPSS 0.11%Jun 3, 2026
- Medium4.8FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.26%Jun 3, 2026
- High7.3Local privilege escalation due to excessive permissions assigned to child processes.Check if you run itEPSS 0.11%Jun 3, 2026
- Medium6.9FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.28%Jun 3, 2026
- Medium4.1Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_pageCheck if you run itEPSS 0.19%Jun 3, 2026
- Medium5.3A use-of-uninitialized memory vulnerability exists in libxls 1.6.3 when parsing malformed XLS files.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium6.5libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser.Check if you run itEPSS 0.27%Jun 3, 2026
Sort