Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.5SimpleHelp Authentication Bypass VulnerabilityPatch nowKEVEPSS 77.66%Jun 12, 2026
- Critical9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of…Check if you run itEPSS 0.53%Jun 12, 2026
- Medium6.5A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad).Check if you run itEPSS 0.23%Jun 11, 2026
- Medium6.5An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.Check if you run itEPSS 0.21%Jun 11, 2026
- Unknownslicewp affiliate_program_suite Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.14%Jun 11, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.39%Jun 11, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.68%Jun 10, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationCheck if you run itEPSS 0.77%Jun 10, 2026
- High7.1Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%Jun 10, 2026
- High8.8Jenkins Jenkins Deserialization of Untrusted DataPatch nowKEVEPSS 53.13%Jun 10, 2026
- Critical9.8Splunk Enterprise Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.94%Jun 10, 2026
- Medium6.4The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via…Check if you run itEPSS 0.15%Jun 10, 2026
- Medium5.1A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero.Check if you run itEPSS 0.44%Jun 10, 2026
- UnknownCVE-2026-9694 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.21%Jun 10, 2026
- UnknownCVE-2026-9204 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.25%Jun 10, 2026
- UnknownCVE-2026-8589 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.26%Jun 10, 2026
- UnknownCVE-2026-7250 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.37%Jun 10, 2026
- UnknownCVE-2026-6976 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.16%Jun 10, 2026
- UnknownCVE-2026-6277 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.22%Jun 10, 2026
- UnknownCVE-2026-6269 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.19%Jun 10, 2026
- UnknownCVE-2026-3553 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.24%Jun 10, 2026
- Unknowntribulant newsletters Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.38%Jun 10, 2026
- UnknownCVE-2026-1500 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.32%Jun 10, 2026
- Unknownupdraftplus updraftplus Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 4.31%Jun 10, 2026
- UnknownCVE-2026-10733 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.22%Jun 10, 2026
Sort