Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-10712 is listed by GitLab Patch Release: 19.1.1, 19.0.3, 18.11.6.Check if you run itEPSS 0.43%Jun 24, 2026
- UnknownCVE-2026-10086 is listed by GitLab Patch Release: 19.1.1, 19.0.3, 18.11.6.Check if you run itEPSS 0.35%Jun 24, 2026
- UnknownCVE-2026-0934 is listed by GitLab Patch Release: 19.1.1, 19.0.3, 18.11.6.Check if you run itEPSS 0.33%Jun 24, 2026
- UnknownMicrosoft SharePoint Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 15.17%Jun 24, 2026
- Medium4.4A flaw was found in GStreamer's gst-plugins-bad package.Check if you run itEPSS 0.16%Jun 23, 2026
- High8.3OpenAM Unauthenticated Session Hijacking via Information Exposure in CDCServletCheck if you run itEPSS 0.33%Jun 23, 2026
- Critical9.3Langflow Langflow Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.19%Jun 23, 2026
- High8.4Langflow Authorization Bypass Through User-Controlled Key VulnerabilityPatch nowKEVEPSS 0.89%Jun 23, 2026
- Medium6.1A flaw was found in OpenSSH.Check if you run itEPSS 0.12%Jun 23, 2026
- Medium6.5A flaw was found in OpenSSH.Check if you run itEPSS 0.53%Jun 23, 2026
- High7.1bt_iso_recv() in subsys/bluetooth/host/iso.c pulled the ISO SDU header (4 bytes) or, when the timestamp flag is set, the timestamped SDU header (8 bytes) from the inbo…Check if you run itEPSS 0.28%Jun 23, 2026
- Medium6.5bt_sdp_parse_attribute() in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-marker byte plus the 2-byte attribute ID (a che…Check if you run itEPSS 0.30%Jun 23, 2026
- Medium5.5The Zephyr ext2 filesystem driver (subsys/fs/ext2) trusted the on-disk directory entry fields de_rec_len and de_name_len when walking a directory block.Check if you run itEPSS 0.16%Jun 23, 2026
- Critical9.8Incorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Jun 23, 2026
- Unknownberqier berqwp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.98%Jun 23, 2026
- High7.0libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handlingCheck if you run itEPSS 0.36%Jun 22, 2026
- High7.5Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyCheck if you run itEPSS 0.84%Jun 22, 2026
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 20.07%Jun 20, 2026
- Highgithubtoplanguages: Command Injection via Issue Title in Discord Notification WorkflowCheck if you run itEPSS 0.53%Jun 19, 2026
- HighUni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requestsCheck if you run itEPSS 0.26%Jun 19, 2026
- High7.1libde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.37%Jun 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period.Check if you run itEPSS 0.14%Jun 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device.Check if you run itEPSS 0.11%Jun 19, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolCheck if you run itEPSS 0.30%Jun 19, 2026
- UnknownEntire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewindCheck if you run itEPSS 0.38%Jun 19, 2026
Sort