Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A flaw was found in the vllm-orchestrator-gateway component.Check if you run itEPSS 0.52%Jul 13, 2026
- Medium4.6The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numake…Check if you run itEPSS 0.23%Jul 12, 2026
- High7.8Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated…Check if you run itEPSS 0.15%Jul 12, 2026
- Critical9.8parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buff…Check if you run itEPSS 0.65%Jul 12, 2026
- High7.4In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c linearizes an inbound transport-data payload into a fixed pool buf…Check if you run itEPSS 0.60%Jul 12, 2026
- Medium5.0The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drivers/wifi/nrf_wifi/src/wifi_mgmt.c copied TWT (Target Wake Time) flow…Check if you run itEPSS 0.22%Jul 12, 2026
- Medium6.1In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/usb/host/usbh_device.c) freed the root usb_device slab object without…Check if you run itEPSS 0.24%Jul 12, 2026
- Critical9.4LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup.Check if you run itEPSS 1.62%Jul 12, 2026
- Medium6.4The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single fil…Check if you run itEPSS 0.25%Jul 11, 2026
- High8.7Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__Check if you run itEPSS 0.31%Jul 11, 2026
- Critical10.0PraisonAI before 1.6.78 Remote Code Execution via CodeAgentCheck this weekEPSS 15.24%Jul 11, 2026
- Critical9.4PraisonAI before 4.6.78 Arbitrary File Write and Command ExecutionCheck if you run itEPSS 0.64%Jul 11, 2026
- High8.7PraisonAI before 4.6.78 Prompt Injection Defense BypassCheck if you run itEPSS 0.34%Jul 11, 2026
- Medium6.9PraisonAI AgentMail before 4.6.78 Message Injection via WebhookCheck if you run itEPSS 0.31%Jul 11, 2026
- High8.8PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure DefaultsCheck if you run itEPSS 0.40%Jul 11, 2026
- Medium6.8PraisonAI before 4.6.78 Path Traversal via Custom CommandsCheck if you run itEPSS 0.22%Jul 11, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.44%Jul 11, 2026
- Medium6.9Nezha Monitoring: DDNS and Notification credential exposure via unredacted list APICheck if you run itEPSS 0.39%Jul 10, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026
- High8.7Grav Admin Plugin — IDOR Privilege Escalation via saveUser()Check if you run itEPSS 0.27%Jul 10, 2026
- Critical9.3A flaw was found in the file_type content detector of guardrails-detectors.Check if you run itEPSS 0.54%Jul 10, 2026
- High8.7PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to execute restricted commands via find's b…Check if you run itEPSS 0.73%Jul 10, 2026
- Medium6.9PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (praisonaiagents.context.fast).Check if you run itEPSS 0.34%Jul 10, 2026
- Medium6.8PraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to validate include paths in .praisoncontext and .praisoninclude files.Check if you run itEPSS 0.37%Jul 10, 2026
- Medium6.9PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.toml when constructing an Agent, and does not…Check if you run itEPSS 0.20%Jul 10, 2026
Sort