Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed When retrieving the PEK C…Check if you run itEPSS 0.13%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the…Check if you run itEPSS 0.13%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for…Check if you run itEPSS 0.13%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpc_preparse(), there…Check if you run itEPSS 0.14%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized diren…Check if you run itEPSS 0.28%May 1, 2026
- Low2.1A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09.Check if you run itEPSS 0.17%May 1, 2026
- Low2.0A weakness has been identified in MacCMS Pro up to 2022.1.3.Check if you run itEPSS 0.23%May 1, 2026
- Critical9.8The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches.Check if you run itEPSS 1.23%May 1, 2026
- Critical9.8The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0.Check if you run itEPSS 9.25%May 1, 2026
- High7.5Apache Neethi does not properly detect circular references in policy definitions.Check if you run itEPSS 0.76%May 1, 2026
- Critical10.0JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator.Check if you run itEPSS 0.57%May 1, 2026
- Medium5.5A vulnerability was identified in itsourcecode Electronic Judging System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- High8.8Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.Check if you run itEPSS 0.31%May 1, 2026
- Medium5.5A weakness has been identified in SourceCodester Advanced School Management System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.82%May 1, 2026
- Low2.1A vulnerability was found in Bootstrap CMS 0.9.0-alpha.Check if you run itEPSS 0.23%Apr 30, 2026
- Medium6.5Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext.Check if you run itEPSS 0.20%Apr 30, 2026
- High8.7HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary…Check if you run itEPSS 0.65%Apr 30, 2026
- Low2.1A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.26%Apr 30, 2026
- Medium5.3In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data).Check if you run itEPSS 0.25%Apr 30, 2026
- Medium6.5IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.37%Apr 30, 2026
- Medium5.5IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.Check if you run itEPSS 0.09%Apr 30, 2026
- Medium5.3IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.22%Apr 30, 2026
- Low2.0A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.25%Apr 30, 2026
- High8.6SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without paramete…Check if you run itEPSS 0.53%Apr 30, 2026
Sort