Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.Check if you run itEPSS 0.24%Jul 21, 2026
- Low1.8A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.Check if you run itEPSS 0.25%Jul 21, 2026
- Medium6.9A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory.Check if you run itEPSS 0.31%Jul 21, 2026
- High8.7In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to r…Check if you run itEPSS 0.52%Jul 21, 2026
- Critical9.0Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host…Check if you run itEPSS 0.58%Jul 21, 2026
- Critical9.3Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute f…Check if you run itEPSS 0.71%Jul 21, 2026
- Low2.1Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media_image() method that allows attackers cont…Check if you run itEPSS 0.30%Jul 21, 2026
- Medium4.2HCL IEM was affected with X-Content-Type-Options Header Missing.Check if you run itEPSS 0.20%Jul 21, 2026
- Medium4.3HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing.Check if you run itEPSS 0.25%Jul 21, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.43%Jul 21, 2026
- High8.7PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.50%Jul 21, 2026
- MediumCache confusion of response bodies for requests with bodiesCheck if you run itEPSS 0.34%Jul 21, 2026
- High7.5CVE-2026-44907 is listed by Denial of Service in Server Functions.Check if you run itEPSS 0.60%Jul 21, 2026
- High7.5A flaw was found in libssh.Check if you run itEPSS 0.44%Jul 21, 2026
- High7.5A flaw was found in dracut.Check if you run itEPSS 3.22%Jul 21, 2026
- Critical9.8Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152.Check if you run itEPSS 0.61%Jul 21, 2026
- Critical9.8Memory safety bugs present in Thunderbird 152.Check if you run itEPSS 0.57%Jul 21, 2026
- Critical9.8Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152.Check if you run itEPSS 0.61%Jul 21, 2026
- Unknownlinux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilitieOpen the advisoryJul 21, 2026
- High7.3A flaw was found in libssh.Check if you run itEPSS 0.17%Jul 21, 2026
- Medium5.9OpenVPN Client Export Utility users can export private keys for unlisted certificate refsOpen the advisoryJul 21, 2026
- Medium5.3Unauthenticated lighttpd request-body disk exhaustionOpen the advisoryJul 21, 2026
- High7.6Manual Config::save() paths bypass user-config-readonly enforcementOpen the advisoryJul 21, 2026
- Medium6.3Multiple Stored XSSOpen the advisoryJul 21, 2026
- HighServer-Side Request Forgery in Server Actions on custom serversCheck if you run itEPSS 0.46%Jul 21, 2026
Sort