Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.Check if you run itEPSS 0.47%Jul 3, 2026
- Critical9.1A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check.Check if you run itEPSS 0.66%Jul 3, 2026
- High8.1A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so itCheck if you run itEPSS 0.31%Jul 3, 2026
- Critical9.8stale proxy password leakCheck if you run itEPSS 1.06%Jul 3, 2026
- High7.5incomplete mTLS config matching in conn reuseCheck if you run itEPSS 0.40%Jul 3, 2026
- Critical9.8cross-origin Digest auth state leakCheck if you run itEPSS 0.69%Jul 3, 2026
- High8.8Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Check if you run itEPSS 0.28%Jul 2, 2026
- Medium6.5Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors:…Check if you run itEPSS 0.33%Jul 2, 2026
- High8.1The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4.Check if you run itEPSS 0.76%Jul 2, 2026
- Medium4.3The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass…Check if you run itEPSS 0.49%Jul 2, 2026
- Unknowncreativethemes blocksy_companion Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.57%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.48%Jul 2, 2026
- UnknownD-Link dir-823x_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 15.74%Jul 2, 2026
- UnknownIvanti automation SQL Injection: HibernatePatch nowKEVEPSS 0.90%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.28%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 2, 2026
- Medium6.8Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permis…Check if you run itEPSS 0.17%Jul 1, 2026
- UnknownHCSEC-2026-16 - Vault Audit Device Plugin Directory Guard Bypass via Legacy Path OptionCheck if you run itEPSS 0.38%Jul 1, 2026
- High7.5ClamAV ALZ Archive Processing Denial of Service VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV DMG File Processing Denial of Service VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV InstallShield File Format Processing Resource Exhaustion VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV PE File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.5ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption VulnerabilityCheck if you run itEPSS 0.57%Jul 1, 2026
- High7.8drm/i915/gem: Fix phys BO pread/pwrite with offsetCheck if you run itEPSS 0.13%Jul 1, 2026
Sort