Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (…Check if you run itEPSS 1.99%May 23, 2026
- High7.8Linux Kernel Out-of-bounds WritePatch nowKEVEPSS 10.19%May 23, 2026
- Low2.1A flaw has been found in omec-project amf up to 2.1.1.Check if you run itEPSS 0.23%May 23, 2026
- Low2.1A vulnerability was detected in omec-project amf up to 2.1.1.Check if you run itEPSS 0.23%May 23, 2026
- Low2.1A security vulnerability has been detected in Edimax BR-6428NS 1.10.Check if you run itEPSS 2.30%May 23, 2026
- Low2.1A weakness has been identified in Edimax BR-6428NS 1.10.Check if you run itEPSS 1.91%May 23, 2026
- High7.4A security flaw has been discovered in Edimax BR-6428NS 1.10.Check if you run itEPSS 0.54%May 23, 2026
- High7.4A vulnerability was identified in Edimax BR-6428NS 1.10.Check if you run itEPSS 0.54%May 23, 2026
- High8.2The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information disclosure due to missing authorization checks on…Check if you run itEPSS 0.46%May 23, 2026
- High8.8The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember3_Hooks::generate_a…Check if you run itEPSS 0.24%May 23, 2026
- High8.8The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\Team_Acco…Check if you run itEPSS 0.24%May 23, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.25%May 23, 2026
- High8.8The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1.Check if you run itEPSS 0.26%May 23, 2026
- Critical9.8Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.49%May 22, 2026
- Critical10.0Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.30%May 22, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.50%May 22, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.40%May 22, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.34%May 22, 2026
- High7.5Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.92%May 22, 2026
- Critical9.3Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.Check if you run itEPSS 0.42%May 22, 2026
- Critical9.8Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.53%May 22, 2026
- High8.8Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.53%May 22, 2026
- High8.8Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.43%May 22, 2026
- Critical9.8Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.47%May 22, 2026
- High7.7Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.58%May 22, 2026
Sort