Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Socket.IO enables bidirectional and low-latency communication for every platform.Check if you run itEPSS 0.64%Jul 8, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionCheck if you run itEPSS 0.38%Jul 8, 2026
- Medium6.5sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.Check if you run itEPSS 0.29%Jul 8, 2026
- Low3.7sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled fCheck if you run itEPSS 0.62%Jul 8, 2026
- Medium4.8sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.Check if you run itEPSS 0.18%Jul 8, 2026
- UnknownCVE-2026-8472 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.39%Jul 8, 2026
- UnknownCVE-2026-7492 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.35%Jul 8, 2026
- UnknownCVE-2026-6896 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.40%Jul 8, 2026
- UnknownCVE-2026-6352 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.44%Jul 8, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityPatch nowKEVEPSS 0.84%Jul 8, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 14.85%Jul 8, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 2.05%Jul 8, 2026
- UnknownCVE-2026-13320 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.39%Jul 8, 2026
- UnknownCVE-2026-11827 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.44%Jul 8, 2026
- UnknownCVE-2025-12506 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.33%Jul 8, 2026
- High7.7Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise in github.com/zhenorzz/goployCheck if you run itEPSS 0.35%Jul 7, 2026
- Unknowncalibre is an e-book manager.Check if you run itEPSS 0.22%Jul 7, 2026
- Low3.7A logic vulnerability was found in GStreamer's webrtcbin component.Check if you run itEPSS 0.23%Jul 7, 2026
- High8.8A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeploymen…Check if you run itEPSS 0.44%Jul 7, 2026
- High8.1Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0Check if you run itEPSS 0.40%Jul 7, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.08%Jul 7, 2026
- UnknownHCSEC-2026-17 - Terraform Enterprise vulnerable to arbitrary file readCheck if you run itEPSS 0.44%Jul 6, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplCheck if you run itEPSS 0.29%Jul 6, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.41%Jul 6, 2026
- Low2.1swoosh has email-derived URL path injection in Microsoft Graph endpointCheck if you run itEPSS 0.20%Jul 6, 2026
Sort