Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.5SimpleHelp Authentication Bypass VulnerabilityPatch nowKEVEPSS 77.66%Jun 12, 2026
- Critical9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of…Check if you run itEPSS 0.53%Jun 12, 2026
- High8.7A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays.Check if you run itEPSS 0.38%Jun 12, 2026
- Medium6.5A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad).Check if you run itEPSS 0.23%Jun 11, 2026
- Medium6.5An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.Check if you run itEPSS 0.21%Jun 11, 2026
- Critical9.8CVE-2026-49261 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 1.58%Jun 11, 2026
- Medium5.0An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c.Check if you run itEPSS 0.27%Jun 11, 2026
- Unknownslicewp affiliate_program_suite Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.14%Jun 11, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.39%Jun 11, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.68%Jun 10, 2026
- High7.5A flaw was found in dracut.Check if you run itEPSS 1.27%Jun 10, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationCheck if you run itEPSS 0.77%Jun 10, 2026
- High7.1Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%Jun 10, 2026
- High8.8Jenkins Jenkins Deserialization of Untrusted DataPatch nowKEVEPSS 53.13%Jun 10, 2026
- Critical9.8Splunk Enterprise Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.94%Jun 10, 2026
- High7.3A local privilege escalation vulnerability was found in the ansible.posix authorized_key module.Check if you run itEPSS 0.16%Jun 10, 2026
- Medium6.4The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via…Check if you run itEPSS 0.18%Jun 10, 2026
- Medium5.1A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero.Check if you run itEPSS 0.44%Jun 10, 2026
- UnknownCVE-2026-9694 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.21%Jun 10, 2026
- UnknownCVE-2026-9204 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.25%Jun 10, 2026
- UnknownCVE-2026-8589 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.26%Jun 10, 2026
- UnknownCVE-2026-7250 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.37%Jun 10, 2026
- UnknownCVE-2026-6976 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.16%Jun 10, 2026
- UnknownCVE-2026-6552 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Open the advisoryJun 10, 2026
- UnknownCVE-2026-6277 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.22%Jun 10, 2026
Sort