Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Hugo is a static site generator.Check if you run itEPSS 0.30%Jul 6, 2026
- High7.5Pillow is a Python imaging library.Check if you run itEPSS 0.52%Jul 6, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.41%Jul 6, 2026
- Low2.1swoosh has email-derived URL path injection in Microsoft Graph endpointCheck if you run itEPSS 0.20%Jul 6, 2026
- UnknownGitea Gitea Improper Access ControlPatch nowKEVEPSS 2.76%Jul 6, 2026
- Medium5.3Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which…Check if you run itEPSS 0.40%Jul 5, 2026
- Medium4.6The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endpoint buffer in its OUT and IN transfer-completi…Check if you run itEPSS 0.28%Jul 5, 2026
- Medium4.3WordPress CrawlWP SEO plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) vulnerabilityCheck if you run itEPSS 0.14%Jul 5, 2026
- Medium5.3WordPress FormLayer plugin <= 1.0.6 - Sensitive Data Exposure vulnerabilityCheck if you run itEPSS 0.33%Jul 5, 2026
- Medium5.3WordPress Exclusive Addons Elementor plugin <= 2.7.9.9 - Sensitive Data Exposure vulnerabilityCheck if you run itEPSS 0.33%Jul 5, 2026
- High7.1Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File ReadCheck if you run itEPSS 0.51%Jul 5, 2026
- High7.8Privilege Escalation in TUBITAK BILGEM's Pardus UpdateCheck if you run itEPSS 0.14%Jul 5, 2026
- High8.8DNS Hijacking in TUBITAK BILGEM's Pardus-Parental-ControlCheck if you run itEPSS 0.14%Jul 5, 2026
- High7.8Linux Kernel Unspecified VulnerabilityPatch nowKEVEPSS 0.71%Jul 4, 2026
- Medium4.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck if you run itEPSS 0.70%Jul 3, 2026
- High7.3A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.Check if you run itEPSS 0.47%Jul 3, 2026
- Critical9.1A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check.Check if you run itEPSS 0.66%Jul 3, 2026
- High8.1A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so itCheck if you run itEPSS 0.31%Jul 3, 2026
- Critical9.8stale proxy password leakCheck if you run itEPSS 1.06%Jul 3, 2026
- High7.5incomplete mTLS config matching in conn reuseCheck if you run itEPSS 0.40%Jul 3, 2026
- Critical9.8cross-origin Digest auth state leakCheck if you run itEPSS 0.69%Jul 3, 2026
- Low3.7Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls_gen_connection module) allows a network-positioned attCheck if you run itEPSS 0.14%Jul 2, 2026
- High8.8Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Check if you run itEPSS 0.28%Jul 2, 2026
- Medium6.5Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors:…Check if you run itEPSS 0.33%Jul 2, 2026
- High8.1The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4.Check if you run itEPSS 0.76%Jul 2, 2026
Sort