Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center.Check if you run itEPSS 0.43%Jul 21, 2026
- High8.0This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows.Check if you run itEPSS 0.59%Jul 21, 2026
- Medium5.8In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.Check if you run itEPSS 0.43%Jul 21, 2026
- Medium5.7In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.Check if you run itEPSS 0.52%Jul 21, 2026
- Critical9.8PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Check if you run itEPSS 0.45%Jul 21, 2026
- High8.1PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Check if you run itEPSS 0.34%Jul 21, 2026
- Medium6.5PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Check if you run itEPSS 0.29%Jul 21, 2026
- Critical9.4PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Check if you run itEPSS 0.30%Jul 21, 2026
- High8.1PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Check if you run itEPSS 0.41%Jul 21, 2026
- High8.8PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Check if you run itEPSS 0.36%Jul 21, 2026
- High8.8PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.Check if you run itEPSS 0.36%Jul 21, 2026
- High8.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.50%Jul 21, 2026
- High7.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.46%Jul 21, 2026
- High7.8ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.38%Jul 21, 2026
- Medium4.3In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 / CWE-862) has been identified in the Direct Device Integration (DDI) Controller.Check if you run itEPSS 0.36%Jul 21, 2026
- Low2.1A security flaw has been discovered in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead.Check if you run itEPSS 0.35%Jul 21, 2026
- High8.6A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of googleapis/mcp-toolbox.Check if you run itEPSS 0.20%Jul 21, 2026
- High7.3BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources.Check if you run itEPSS 0.20%Jul 21, 2026
- Medium6.0A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.Check if you run itEPSS 0.24%Jul 21, 2026
- Low1.8A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.Check if you run itEPSS 0.25%Jul 21, 2026
- Medium6.9A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory.Check if you run itEPSS 0.31%Jul 21, 2026
- High8.7In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to r…Check if you run itEPSS 0.52%Jul 21, 2026
- Critical9.0Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host…Check if you run itEPSS 0.58%Jul 21, 2026
- Critical9.3Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute f…Check if you run itEPSS 0.71%Jul 21, 2026
- Low2.1Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media_image() method that allows attackers cont…Check if you run itEPSS 0.30%Jul 21, 2026
Sort