Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Unauthenticated lighttpd request-body disk exhaustionOpen the advisoryJul 21, 2026
- High7.6Manual Config::save() paths bypass user-config-readonly enforcementOpen the advisoryJul 21, 2026
- Medium6.3Multiple Stored XSSOpen the advisoryJul 21, 2026
- HighServer-Side Request Forgery in Server Actions on custom serversCheck if you run itEPSS 0.46%Jul 21, 2026
- MediumUnbounded Server Action payload in Edge runtimeCheck if you run itEPSS 0.52%Jul 21, 2026
- HighServer-Side Request Forgery in rewrites via attacker-controlled destination hostnameCheck if you run itEPSS 0.41%Jul 21, 2026
- UnknownCVE-2026-64644 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.67%Jul 21, 2026
- UnknownCVE-2026-64643 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.51%Jul 21, 2026
- UnknownCVE-2026-64642 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.64%Jul 21, 2026
- UnknownCVE-2026-64641 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.86%Jul 21, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.04%Jul 21, 2026
- Critical9.4Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms allows a low-privileged authenticated baCheck if you run itEPSS 0.58%Jul 20, 2026
- High7.5A flaw was found in libcupsfilters and cups-filters.Check if you run itEPSS 0.70%Jul 20, 2026
- Medium5.5libvips is a fast image processing library with low memory needs.Check if you run itEPSS 0.15%Jul 20, 2026
- High7.8i2c: stub: Reject I2C block transfers with invalid lengthCheck if you run itEPSS 0.17%Jul 20, 2026
- High7.8netfilter: ipset: fix race between dump and ip_set_list resizeCheck if you run itEPSS 0.13%Jul 20, 2026
- Medium4.8HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format.Check if you run itEPSS 0.48%Jul 20, 2026
- Low3.7HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled.Check if you run itEPSS 0.55%Jul 20, 2026
- High7.3A flaw was found in the QEMU Guest Agent (qga).Check if you run itEPSS 0.14%Jul 20, 2026
- Medium5.3A denial-of-service and resource exhaustion vulnerability exists within the component of GLib.Check if you run itEPSS 0.48%Jul 20, 2026
- UnknownCVE-2026-47281 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsanfälligkeit in Visual Studio Code bezüglich RechteerweiterungenCheck if you run itEPSS 0.83%Jul 20, 2026
- Unknownphpbb phpbb Improper AuthenticationPatch nowKEVEPSS 3.86%Jul 20, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where i_size > remote_i_size Fix the update of the zero point[*] by net…Check if you run itEPSS 0.16%Jul 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_init(), node is obtained via of…Check if you run itEPSS 0.13%Jul 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0025 ("erofs: use meta buffers…Check if you run itEPSS 0.13%Jul 19, 2026
Sort