Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.6A flaw was found in GnuTLS.Check if you run itEPSS 0.15%Jun 16, 2026
- UnknownShapedPlugin Pro Backdoor CompromisePatch nowKEVEPSS 0.43%Jun 16, 2026
- Medium6.5Rank Math seo Missing AuthorizationPatch nowKEVEPSS 0.29%Jun 15, 2026
- High7.5LatePoint latepoint Incorrect Privilege AssignmentPatch nowKEVEPSS 0.34%Jun 15, 2026
- High7.6A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good.Check if you run itEPSS 0.38%Jun 15, 2026
- High7.1A signed integer overflow vulnerability was found in GStreamer's VMnc decoder.Check if you run itEPSS 0.39%Jun 15, 2026
- High8.8A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client).Check if you run itEPSS 0.64%Jun 15, 2026
- High7.1An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad.Check if you run itEPSS 0.34%Jun 15, 2026
- Medium6.5A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad.Check if you run itEPSS 0.39%Jun 15, 2026
- High8.8Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.78%Jun 15, 2026
- Medium5.3Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which cache…Check if you run itEPSS 0.27%Jun 15, 2026
- Medium5.1WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings a…Check if you run itEPSS 0.24%Jun 15, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.26%Jun 15, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 88.51%Jun 15, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityPatch nowKEVEPSS 29.12%Jun 15, 2026
- High7.5themewinter eventin Missing AuthorizationPatch nowKEVEPSS 0.22%Jun 15, 2026
- High7.2Moby: Race condition in docker cp allows bind mount redirection to host pathCheck if you run itEPSS 0.10%Jun 12, 2026
- Medium6.1Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCheck if you run itEPSS 0.11%Jun 12, 2026
- Critical9.5SimpleHelp Authentication Bypass VulnerabilityPatch nowKEVEPSS 77.66%Jun 12, 2026
- Critical9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of…Check if you run itEPSS 0.53%Jun 12, 2026
- Medium6.5A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad).Check if you run itEPSS 0.23%Jun 11, 2026
- Medium6.5An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.Check if you run itEPSS 0.21%Jun 11, 2026
- Unknownslicewp affiliate_program_suite Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.14%Jun 11, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.39%Jun 11, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.68%Jun 10, 2026
Sort