Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permissi…Check if you run itEPSS 0.18%May 27, 2026
- High7.5Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to p…Check if you run itEPSS 0.35%May 27, 2026
- High7.5Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control th…Check if you run itEPSS 0.29%May 27, 2026
- High8.8Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as in email content by setting the attribute, without restrictions on the image UR…Check if you run itEPSS 0.29%May 27, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.Check if you run itEPSS 0.26%May 27, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.Check if you run itEPSS 0.22%May 27, 2026
- Medium4.3IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.Check if you run itEPSS 0.22%May 27, 2026
- Critical9.1IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability.Check if you run itEPSS 0.31%May 27, 2026
- High7.5IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.Check if you run itEPSS 0.18%May 27, 2026
- Medium6.5IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler.Check if you run itEPSS 0.24%May 27, 2026
- Medium5.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables.Check if you run itEPSS 0.10%May 27, 2026
- High7.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.Check if you run itEPSS 0.24%May 27, 2026
- High7.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.Check if you run itEPSS 0.18%May 27, 2026
- Medium5.5IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.Check if you run itEPSS 0.10%May 27, 2026
- High7.5IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vul…Check if you run itEPSS 0.50%May 27, 2026
- Medium5.1libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of ser…Check if you run itEPSS 0.13%May 27, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for examp…Check if you run itEPSS 0.56%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nft_bitwise Reject zero shift operands for nft_bitwise left and rig…Check if you run itEPSS 0.13%May 27, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6_input_core() and rpl_input() call ip6_r…Check if you run itEPSS 0.29%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridge() returns NULL if the devi…Check if you run itEPSS 0.14%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() snd_ctl_elem_ini…Check if you run itEPSS 0.13%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in pla…Check if you run itEPSS 0.13%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cleanup() if spi_setup…Check if you run itEPSS 0.12%May 27, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: md/raid5: validate payload size before accessing journal metadata r5c_recovery_analyze_meta_block()…Check if you run itEPSS 0.13%May 27, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() The mwifiex_adapter_cleanup() functi…Check if you run itEPSS 0.14%May 27, 2026
Sort