Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was identified in sergomanov SmartHomeAdatum up to cf495353d81b680675eb8d9aa14a318aa45ce12c.Check if you run itEPSS 0.41%Jul 12, 2026
- Medium6.4The Bluetooth BAP Broadcast Assistant GATT client in subsys/bluetooth/audio/bap_broadcast_assistant.c reassembled remote Broadcast Receive State data into a single fil…Check if you run itEPSS 0.25%Jul 11, 2026
- High8.7Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__Check if you run itEPSS 0.31%Jul 11, 2026
- Critical10.0PraisonAI before 1.6.78 Remote Code Execution via CodeAgentCheck this weekEPSS 15.24%Jul 11, 2026
- Critical9.4PraisonAI before 4.6.78 Arbitrary File Write and Command ExecutionCheck if you run itEPSS 0.64%Jul 11, 2026
- High8.7PraisonAI before 4.6.78 Prompt Injection Defense BypassCheck if you run itEPSS 0.34%Jul 11, 2026
- Medium6.9PraisonAI AgentMail before 4.6.78 Message Injection via WebhookCheck if you run itEPSS 0.31%Jul 11, 2026
- High8.8PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure DefaultsCheck if you run itEPSS 0.40%Jul 11, 2026
- Medium6.8PraisonAI before 4.6.78 Path Traversal via Custom CommandsCheck if you run itEPSS 0.22%Jul 11, 2026
- Medium5.3Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' ParameterCheck if you run itEPSS 0.36%Jul 11, 2026
- Medium4.3PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode AttributeCheck if you run itEPSS 0.44%Jul 11, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.44%Jul 11, 2026
- Medium5.4Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069Check if you run itEPSS 0.23%Jul 10, 2026
- Medium5.4FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-068Check if you run itEPSS 0.23%Jul 10, 2026
- Medium5.4FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-067Check if you run itEPSS 0.23%Jul 10, 2026
- Medium6.9Nezha Monitoring: DDNS and Notification credential exposure via unredacted list APICheck if you run itEPSS 0.39%Jul 10, 2026
- Medium5.0RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.41%Jul 10, 2026
- High7.5RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 2.84%Jul 10, 2026
- Critical9.8Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038Check if you run itEPSS 0.56%Jul 10, 2026
- High7.8GPU DDK - Page UAF read in PMMETA_PROTECT heap memoryCheck if you run itEPSS 0.18%Jul 10, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026
- Medium5.9GNU Wget versions < 1.25.0+4f85853f64 do not validate the IP address provided by an FTP PASV response while operating in FTP passive mode.Check if you run itEPSS 0.17%Jul 10, 2026
- High8.8IDOR in Teracity's TeraMISCheck if you run itEPSS 0.44%Jul 10, 2026
- Critical9.3MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured ToolsCheck if you run itEPSS 2.36%Jul 10, 2026
- High8.7Krayin CRM Insecure Direct Object Reference via ControllersCheck if you run itEPSS 0.51%Jul 10, 2026
Sort