Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.1A vulnerability has been found in mlrun up to 1.12.0-rc3.Check if you run itEPSS 0.07%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching (25,020 hashes) and CIPA blocklist matching (12,352 hashes).Check if you run itEPSS 0.25%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular expressions via new RegExp()…Check if you run itEPSS 0.43%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension uses EVP_BytesToKey key derivation with MD5 and a single iteration for AES encryption.Check if you run itEPSS 0.16%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data.Check if you run itEPSS 0.21%Jun 3, 2026
- High7.3Version 3.0.7 of the Securly Chrome Extension contains hardcoded, plaintext AES passphrases in securly.min.js.Check if you run itEPSS 0.24%Jun 3, 2026
- High7.1Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API.Check if you run itEPSS 0.14%Jun 3, 2026
- High8.4Concrete CMS below 9.5.3 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components that lack the allowed_class…Check if you run itEPSS 0.15%Jun 3, 2026
- Medium5.5OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Check if you run itEPSS 0.15%Jun 3, 2026
- Medium4.7OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Check if you run itEPSS 0.10%Jun 3, 2026
- Medium5.1An authenticated user can persist arbitrary HTML/JavaScript in the email_id or mobile_no fields of a Customer record and trigger unescaped rendering in the Point of Sa…Check if you run itEPSS 0.24%Jun 3, 2026
- Medium4.8An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and tri…Check if you run itEPSS 0.26%Jun 3, 2026
- Medium6.5Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium5.4Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice featuresCheck if you run itEPSS 0.30%Jun 3, 2026
- High8.6In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not supp…Check if you run itEPSS 0.39%Jun 3, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fix race condition between sysfs and perf mode When trying to run perf and sysf…Check if you run itEPSS 0.12%Jun 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads only on primary link In case of multi-link connection, WCN7850 firmwa…Check if you run itEPSS 0.12%Jun 3, 2026
- High8.4In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in power_supply_changed() Using the variant for requestin…Check if you run itEPSS 0.13%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k230 p…Check if you run itEPSS 0.11%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition Commit b7e282378773 has already changed the i…Check if you run itEPSS 0.11%Jun 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlc_deinit() purges SHDLC skb qu…Check if you run itEPSS 0.12%Jun 3, 2026
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply having…Check if you run itEPSS 0.46%Jun 3, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM warning When sunrpc is used, if a reset triggered, our wq may lead the…Check if you run itEPSS 0.37%Jun 3, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devm_add_action_or_reset() failure the provided clea…Check if you run itEPSS 0.11%Jun 3, 2026
Sort