Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknown[20260802] - Core - Improper CORS origin validationCheck if you run itEPSS 0.34%Aug 17, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%Aug 14, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.38%Aug 11, 2026
- Medium6.5Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash…Check if you run itEPSS 0.42%Jul 17, 2026
- High7.5Socket.IO enables bidirectional and low-latency communication for every platform.Check if you run itEPSS 0.64%Jul 8, 2026
- Medium5.5agp/amd64: Fix broken error propagation in agp_amd64_probe()Check if you run itEPSS 0.13%Jun 29, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityPatch nowKEVEPSS 28.17%Jun 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to take both locks i.e vm root bo a…Check if you run itEPSS 0.12%Jun 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms w…Check if you run itEPSS 0.14%Jun 3, 2026
- Medium6.3A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature.Check if you run itEPSS 0.31%Jun 3, 2026
- Low2.3A flaw has been found in dask up to 3.0.Check if you run itEPSS 0.29%Jun 3, 2026
- High7.5Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws.Check if you run itEPSS 0.62%Jun 3, 2026
- High7.3Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled.Check if you run itEPSS 0.41%Jun 3, 2026
- High7.5Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive.Check if you run itEPSS 0.40%Jun 2, 2026
- Medium5.3Missing Authorization vulnerability in Anton Shevchuk Constructor allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Slider Revolution plugin for WordPress in versions 6.0.0-6.7.55 and 7.0.0-7.0.14 is vulnerable to unauthorized modification of data.Check if you run itEPSS 0.26%Jun 2, 2026
- High7.2Memory corruption while processing fastboot commands with improperly formatted input.Check if you run itEPSS 0.10%Jun 1, 2026
- Medium4.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.36%Jun 1, 2026
- Medium6.5Billy is an interface filesystem abstraction for Go.Check if you run itEPSS 0.39%Jun 1, 2026
- Medium5.4Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata.Check if you run itEPSS 0.26%Jun 1, 2026
- High8.8It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname.Check if you run itEPSS 0.26%Jun 1, 2026
- High8.1Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input.Check if you run itEPSS 0.48%May 31, 2026
- Medium5.3The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1.Check if you run itEPSS 0.52%May 31, 2026
- Medium6.2Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters.Check if you run itEPSS 0.19%May 30, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 1.05%May 29, 2026