Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8A flaw was found in WebKitGTK.Check if you run itEPSS 0.33%Aug 31, 2026
- High7.0A flaw was found in GDB's STABS debug format parser.Check if you run itEPSS 0.13%Aug 31, 2026
- Medium6.5URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprepCheck if you run itEPSS 0.23%Aug 31, 2026
- High7.5A flaw was found in RESTEasy's SourceProvider.Check if you run itEPSS 0.82%Aug 31, 2026
- High7.5A flaw was found in SmallRye GraphQL.Check if you run itEPSS 0.79%Aug 31, 2026
- High8.8A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails.Check if you run itEPSS 0.97%Aug 31, 2026
- Medium6.9nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments.Check if you run itEPSS 0.42%Aug 31, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Aug 31, 2026
- Unknownpixelite events_manager Improper Privilege ManagementPatch nowKEVEPSS 0.50%Aug 31, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.53%Aug 31, 2026
- Critical9.1Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.42%Aug 29, 2026
- High7.5free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.42%Aug 28, 2026
- Medium4.3Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.79%Aug 28, 2026
- Medium6.5External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.92%Aug 28, 2026
- Medium5.4Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.41%Aug 28, 2026
- Medium5.4Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.39%Aug 28, 2026
- Low3.0Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose…Check if you run itEPSS 0.29%Aug 28, 2026
- Medium5.5A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files.Check if you run itEPSS 0.16%Aug 28, 2026
- CriticalApache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incompleteCheck if you run itEPSS 0.61%Aug 28, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 14.37%Aug 28, 2026
- UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPPatch nowKEVEPSS 2.25%Aug 28, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21_add_phantom_plane() is successful Verify that the phantom plane was…Check if you run itEPSS 0.21%Aug 28, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, eng…Check if you run itEPSS 0.21%Aug 28, 2026
- Critical9.3In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the allocated array idpf_get_reg_intr_vecs() fills th…Check if you run itEPSS 0.20%Aug 28, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks There is theoretical UAF if t…Check if you run itEPSS 0.40%Aug 28, 2026
Sort