Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait() The async_hold queue pins encrypted input skbs wh…Check if you run itEPSS 0.36%Apr 2, 2026
- High8.2ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.15%Apr 2, 2026
- Medium5.5A vulnerability was identified in SourceCodester Leave Application System 1.0.Check if you run itEPSS 0.40%Apr 2, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing.Check if you run itEPSS 0.62%Apr 2, 2026
- Low2.9A vulnerability was found in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.72%Apr 2, 2026
- Medium5.3An unauthenticated remote attacker can access a configuration file containing database credentials.Check if you run itEPSS 0.27%Apr 2, 2026
- Critical9.1An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special element…Check if you run itEPSS 0.41%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters.Check if you run itEPSS 0.21%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control…Check if you run itEPSS 0.25%Apr 2, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.Check if you run itEPSS 0.13%Apr 2, 2026
- High7.7SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such as [signed OK].Check if you run itEPSS 0.21%Apr 2, 2026
- High7.7SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding…Check if you run itEPSS 0.12%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to reset a victim account password.Check if you run itEPSS 0.27%Apr 2, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own.Check if you run itEPSS 0.22%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long subject.Check if you run itEPSS 0.19%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates.Check if you run itEPSS 0.10%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization.Check if you run itEPSS 0.25%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictions.Check if you run itEPSS 0.22%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address.Check if you run itEPSS 0.23%Apr 2, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to bypass a second-password check and read protected emails.Check if you run itEPSS 0.25%Apr 2, 2026
- Medium4.9SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users.Check if you run itEPSS 0.23%Apr 2, 2026
- High7.5The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3.Check if you run itEPSS 3.21%Apr 2, 2026
- Low1.9A vulnerability was found in priyankark a11y-mcp up to 1.0.5.Check if you run itEPSS 0.13%Apr 2, 2026
- Medium5.5A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d.Check if you run itEPSS 0.26%Apr 2, 2026
- Low2.1A flaw has been found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.16%Apr 2, 2026
Sort