Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownHeader injection in Web Filter warning pageCheck if you run itEPSS 0.27%Jul 14, 2026
- Medium5.5PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell CommandsCheck if you run itEPSS 0.18%Jul 13, 2026
- Medium6.5The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing a…Check if you run itEPSS 0.40%Jul 13, 2026
- High8.8Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a before 2.9.1.Check if you run itEPSS 0.42%Jul 13, 2026
- High7.5A flaw was found in the vllm-orchestrator-gateway component.Check if you run itEPSS 0.52%Jul 13, 2026
- Low2.1A vulnerability was identified in pig-mesh Pig up to 3.9.2.Check if you run itEPSS 0.39%Jul 13, 2026
- High8.9A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8.Check if you run itEPSS 4.73%Jul 12, 2026
- Low2.1A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30.Check if you run itEPSS 0.35%Jul 12, 2026
- Low2.1A vulnerability was detected in coollabsio Coolify up to 4.1.1.Check if you run itEPSS 0.35%Jul 12, 2026
- High7.1A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3.Check if you run itEPSS 0.20%Jul 12, 2026
- Low2.0A weakness has been identified in vnotex vnote up to 3.20.1.Check if you run itEPSS 0.33%Jul 12, 2026
- Medium4.6The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage unconditionally (base->CEPTXCNT = len in numake…Check if you run itEPSS 0.23%Jul 12, 2026
- High7.8Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated…Check if you run itEPSS 0.15%Jul 12, 2026
- Critical9.8parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte stack buff…Check if you run itEPSS 0.65%Jul 12, 2026
- High7.4In Zephyr's WireGuard subsystem (subsys/net/lib/wireguard), wg_process_data_message() in wg_crypto.c linearizes an inbound transport-data payload into a fixed pool buf…Check if you run itEPSS 0.60%Jul 12, 2026
- Medium5.0The nRF70 Wi-Fi driver's power-save event handler nrf_wifi_event_proc_get_power_save_info() in drivers/wifi/nrf_wifi/src/wifi_mgmt.c copied TWT (Target Wake Time) flow…Check if you run itEPSS 0.22%Jul 12, 2026
- Medium6.1In Zephyr's experimental USB host stack (CONFIG_USB_HOST_STACK), usbh_device_disconnect() (subsys/usb/host/usbh_device.c) freed the root usb_device slab object without…Check if you run itEPSS 0.24%Jul 12, 2026
- High8.3Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.61%Jul 12, 2026
- Medium5.3A vulnerability was detected in AojiaoZero Antaris 1.0.Check if you run itEPSS 0.32%Jul 12, 2026
- Low2.1A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2.Check if you run itEPSS 0.35%Jul 12, 2026
- Critical9.4LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup.Check if you run itEPSS 1.62%Jul 12, 2026
- High8.7luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScript via UPnP IGD AddPortMapping SOAP requests.Check if you run itEPSS 0.36%Jul 12, 2026
- High8.7OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users to execute the Samba daemon with caller-controll…Check if you run itEPSS 0.88%Jul 12, 2026
- Low2.1A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2.Check if you run itEPSS 0.37%Jul 12, 2026
- Low2.1A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2.Check if you run itEPSS 0.35%Jul 12, 2026
Sort