Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix dir separator in SMB1 UNIX mounts When calling cifs_mount_get_tcon() with SMB1 UNI…Check if you run itEPSS 0.14%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to…Check if you run itEPSS 0.26%May 1, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path smb2_ioctl_query_info() has two…Check if you run itEPSS 0.35%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() smb_inherit_dacl() trusts the on…Check if you run itEPSS 0.63%May 1, 2026
- High8.8The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2.Check if you run itEPSS 0.26%May 1, 2026
- Medium4.3The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.14.Check if you run itEPSS 0.18%May 1, 2026
- Critical10.0JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator.Check if you run itEPSS 0.57%May 1, 2026
- Medium6.1Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanit…Check if you run itEPSS 0.28%May 1, 2026
- High8.8Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.Check if you run itEPSS 0.54%May 1, 2026
- Medium6.8CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50.Check if you run itEPSS 0.13%Apr 30, 2026
- High7.1CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50.Check if you run itEPSS 0.42%Apr 30, 2026
- Medium6.8CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.14%Apr 30, 2026
- Medium5.9CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.13%Apr 30, 2026
- High8.5CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.15%Apr 30, 2026
- Low2.3CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50.Check if you run itEPSS 0.26%Apr 30, 2026
- Low2.3CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50.Check if you run itEPSS 0.40%Apr 30, 2026
- Medium4.8CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50.Check if you run itEPSS 0.14%Apr 30, 2026
- Low2.3CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50.Check if you run itEPSS 0.44%Apr 30, 2026
- Low2.3CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50.Check if you run itEPSS 0.52%Apr 30, 2026
- Low3.7A flaw was found in gnutls.Check if you run itEPSS 0.93%Apr 30, 2026
- High7.2This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project.Check if you run itEPSS 0.92%Apr 30, 2026
- Medium4.6LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter.Check if you run itEPSS 0.18%Apr 30, 2026
- Medium5.3NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation.Check if you run itEPSS 0.29%Apr 30, 2026
- High8.1As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers.Check if you run itEPSS 1.81%Apr 30, 2026
- High8.1The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives.Check if you run itEPSS 0.40%Apr 30, 2026