Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels MHI stack offers the 'auto_queue' f…Check if you run itEPSS 0.13%May 6, 2026
- Medium6.9A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g.Check if you run itEPSS 0.31%May 6, 2026
- Medium6.5FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName before constructing file paths, allowing an u…Check if you run itEPSS 1.00%May 6, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called…Check if you run itEPSS 0.35%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix memory leak in airoha_qdma_rx_process() If an error occurs on the subsequents buff…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.2There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, priv…Check if you run itEPSS 0.18%May 6, 2026
- Medium6.1Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects.Check if you run itEPSS 0.20%May 6, 2026
- Medium6.9Gotenberg is an API-based document conversion tool.Check if you run itEPSS 0.31%May 5, 2026
- High8.1In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbi…Check if you run itEPSS 0.50%May 5, 2026
- High8.3Twenty is an open source CRM built with NestJS (Node.js).Check if you run itEPSS 0.37%May 5, 2026
- High8.2CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.42%May 5, 2026
- High8.7CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.53%May 5, 2026
- High8.7CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.63%May 5, 2026
- Medium6.8Tunnelblick is an open source graphic user interface for OpenVPN on macOS.Check if you run itEPSS 0.19%May 5, 2026
- High7.7Redis is an in-memory data structure store.Check if you run itEPSS 1.51%May 5, 2026
- High8.6In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests.Check if you run itEPSS 0.55%May 5, 2026
- Critical10.0In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker…Check if you run itEPSS 1.52%May 5, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling.Check if you run itEPSS 0.52%May 5, 2026
- High8.8OS command injection vulnerability in the traceroute diagnostic handler in /bin/httpd_clientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020…Check if you run itEPSS 2.27%May 5, 2026
- High8.8OS command injection vulnerability in the ping diagnostic handler in /bin/httpd_clientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13…Check if you run itEPSS 2.27%May 5, 2026
- High8.7In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.Check if you run itEPSS 1.18%May 5, 2026
- High7.1OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive unredacted secrets through sourceConfig and ru…Check if you run itEPSS 0.59%May 5, 2026
- Critical9.3Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending pa…Check if you run itEPSS 0.55%May 5, 2026
- Critical9.3Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenticated attackers to execute…Check if you run itEPSS 0.46%May 5, 2026
- Medium6.5RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications.Check if you run itEPSS 0.19%May 5, 2026