Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownblock: Avoid mounting the bdev pseudo-filesystem in userspaceCheck if you run itEPSS 0.21%Jul 19, 2026
- UnknownKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT pathCheck if you run itEPSS 0.14%Jul 19, 2026
- High7.8i2c: core: fix adapter registration raceCheck if you run itEPSS 0.14%Jul 19, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 3.52%Jul 19, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.43%Jul 18, 2026
- High7.1Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG functionCheck if you run itEPSS 0.12%Jul 17, 2026
- High7.1A flaw was found in xdgmime.Check if you run itEPSS 0.22%Jul 17, 2026
- Critical9.8IBM Langflow Code Injection VulnerabilityPatch nowKEVEPSS 28.66%Jul 17, 2026
- Medium6.5Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owne…Check if you run itEPSS 0.42%Jul 17, 2026
- Medium6.5Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash…Check if you run itEPSS 0.42%Jul 17, 2026
- Critical9.3Sangoma Switchvox SQL Injection VulnerabilityPatch nowKEVEPSS 18.98%Jul 17, 2026
- Critical9.8WordPress Core Interpretation Conflict VulnerabilityPatch nowKEVEPSS 10.65%Jul 17, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityPatch nowKEVEPSS 5.32%Jul 17, 2026
- High7.3cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentialsCheck if you run itEPSS 0.11%Jul 16, 2026
- UnknownCVE-2025-43892 is listed by Buffer overread in authd and wad daemon.Check if you run itEPSS 0.38%Jul 16, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012Check if you run itEPSS 0.23%Jul 15, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011Check if you run itEPSS 0.21%Jul 15, 2026
- UnknownDrupal core - Moderately critical - Information disclosure - SA-CORE-2026-010Check if you run itEPSS 0.20%Jul 15, 2026
- High8.8The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (OA) SPI mode by co…Check if you run itEPSS 0.42%Jul 15, 2026
- High7.3PraisonAI vulnerable to Remote Code Execution via Broken AST SandboxCheck if you run itEPSS 0.31%Jul 15, 2026
- UnknownCVE-2026-8281Open the advisoryJul 15, 2026
- Medium6.5Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.74%Jul 14, 2026
- High8.2Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.73%Jul 14, 2026
- Medium5.9Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.71%Jul 14, 2026
- High8.6Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.76%Jul 14, 2026
Sort