Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.27%May 27, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.Check if you run itEPSS 0.15%May 27, 2026
- Medium5.5Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers a…Check if you run itEPSS 0.17%May 27, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.Check if you run itEPSS 0.10%May 27, 2026
- Medium4.3Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.Check if you run itEPSS 0.21%May 27, 2026
- Medium4.3Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permissi…Check if you run itEPSS 0.18%May 27, 2026
- High7.5Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to p…Check if you run itEPSS 0.35%May 27, 2026
- High7.5Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control th…Check if you run itEPSS 0.29%May 27, 2026
- High8.8Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as in email content by setting the attribute, without restrictions on the image UR…Check if you run itEPSS 0.29%May 27, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.Check if you run itEPSS 0.26%May 27, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.Check if you run itEPSS 0.22%May 27, 2026
- Medium4.3IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.Check if you run itEPSS 0.22%May 27, 2026
- Critical9.1IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability.Check if you run itEPSS 0.31%May 27, 2026
- High7.5IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.Check if you run itEPSS 0.18%May 27, 2026
- Medium6.5IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler.Check if you run itEPSS 0.24%May 27, 2026
- Medium5.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables.Check if you run itEPSS 0.10%May 27, 2026
- High7.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.Check if you run itEPSS 0.24%May 27, 2026
- High7.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.Check if you run itEPSS 0.18%May 27, 2026
- Medium5.5IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.Check if you run itEPSS 0.10%May 27, 2026
- High7.5IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vul…Check if you run itEPSS 0.50%May 27, 2026
- Medium5.1libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of ser…Check if you run itEPSS 0.13%May 27, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for examp…Check if you run itEPSS 0.56%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nft_bitwise Reject zero shift operands for nft_bitwise left and rig…Check if you run itEPSS 0.13%May 27, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6_input_core() and rpl_input() call ip6_r…Check if you run itEPSS 0.29%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridge() returns NULL if the devi…Check if you run itEPSS 0.14%May 27, 2026
Sort