Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect syzkaller reported a bug…Check if you run itEPSS 0.12%Apr 3, 2026
- High8.7In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation proc…Check if you run itEPSS 0.57%Apr 2, 2026
- High8.5A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadve…Check if you run itEPSS 0.25%Apr 2, 2026
- High8.8Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.Check if you run itEPSS 3.42%Apr 2, 2026
- Critical9.8Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages.Patch nowKEVEPSS 3.18%Apr 2, 2026
- Medium6.5FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.80%Mar 30, 2026
- High7.7MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.72, an unauthenticated attacker can lock out administrator and visitor ac…Check if you run itEPSS 0.80%Mar 27, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProgressionStudios Vayvo vayvo-progression allows Reflected XSS.T…Check if you run itEPSS 0.18%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel tx_work before socket teardown In rawsock_release(), cancel any pending tx_wor…Check if you run itEPSS 0.14%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Yiming Qian reports Use-after-fre…Check if you run itEPSS 0.13%Mar 25, 2026
- Medium6.5tinytag is a Python library for reading audio file metadata.Check if you run itEPSS 0.51%Mar 20, 2026
- High7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveCheck if you run itEPSS 0.70%Mar 13, 2026
- High8.6In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious ne…Check if you run itEPSS 0.19%Mar 12, 2026
- High8.6A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may in…Check if you run itEPSS 0.17%Mar 12, 2026
- Medium4.3The Reading progressbar WordPress plugin before 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor…Check if you run itEPSS 0.25%Mar 12, 2026
- High8.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.33%Mar 9, 2026
- Medium6.2GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data.Check if you run itEPSS 0.18%Mar 9, 2026
- Medium6.2GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data.Check if you run itEPSS 0.16%Mar 9, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Progress progress allows PHP Local Fi…Check if you run itEPSS 0.58%Mar 5, 2026
- Medium5.9In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyncUpload, where a predictable temporary identifi…Check if you run itEPSS 0.31%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.08%Feb 25, 2026
- Critical9.9Hackage package and doc upload stored XSS vulnerabilityCheck if you run itEPSS 0.43%Jan 16, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks on the tx_lock syzbot sent a hung task report and Eric explains that…Check if you run itEPSS 0.60%Dec 30, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the attempt to progress…Check if you run itEPSS 0.12%Dec 16, 2025
- Medium5.3The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability…Open the advisoryDec 3, 2025