Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5ClamAV PDF File Format Processing Memory Corruption VulnerabilityCheck if you run itEPSS 0.54%Aug 7, 2026
- High7.5ClamAV ZIP File Format Processing Memory Corruption VulnerabilityCheck if you run itEPSS 0.56%Aug 7, 2026
- High7.5ClamAV ZIP File Format Processing Memory Corruption VulnerabilityCheck if you run itEPSS 0.60%Aug 7, 2026
- Medium6.3llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to t…Check if you run itEPSS 0.50%Aug 6, 2026
- UnknownCVE-2026-64638 is listed by WordPress 7.0.3 Released: 12 Vulnerabilities Found and Fixed.Check if you run itEPSS 0.89%Aug 6, 2026
- High7.5league/commonmark: Denial of service via colliding heading slugsCheck if you run itEPSS 0.51%Aug 6, 2026
- Critical9.8Apple macOS Improper Authentication VulnerabilityPatch nowKEVEPSS 1.72%Aug 6, 2026
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 22.39%Aug 6, 2026
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 98.55%Aug 6, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 0.87%Aug 6, 2026
- Medium5.1A flaw was found in libkcapi.Check if you run itEPSS 0.20%Aug 5, 2026
- High7.3Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel…Check if you run itEPSS 0.14%Aug 5, 2026
- Medium6.5A flaw was found in libkcapi.Check if you run itEPSS 0.34%Aug 5, 2026
- High7.8xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()Check if you run itEPSS 0.13%Aug 5, 2026
- Unknownipv4: fib: free fib_alias with kfree_rcu() on insert error pathCheck if you run itEPSS 0.20%Aug 5, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Aug 5, 2026
- Unknownkaliforms contact_form_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Aug 5, 2026
- Critical9.2FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Aug 4, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.56%Aug 4, 2026
- Medium6.9Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle a…Check if you run itEPSS 0.46%Aug 3, 2026
- UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Patch nowKEVEPSS 30.07%Aug 3, 2026
- High7.1NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionCheck if you run itEPSS 0.10%Aug 3, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.58%Aug 3, 2026
- Unknownb3log siyuan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.17%Aug 3, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 14.62%Aug 2, 2026
Sort