Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck if you run itEPSS 0.70%Jul 3, 2026
- High7.3A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.Check if you run itEPSS 0.47%Jul 3, 2026
- Critical9.1A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check.Check if you run itEPSS 0.66%Jul 3, 2026
- High8.1A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so itCheck if you run itEPSS 0.31%Jul 3, 2026
- Critical9.8stale proxy password leakCheck if you run itEPSS 1.06%Jul 3, 2026
- High7.5incomplete mTLS config matching in conn reuseCheck if you run itEPSS 0.40%Jul 3, 2026
- Critical9.8cross-origin Digest auth state leakCheck if you run itEPSS 0.69%Jul 3, 2026
- Low3.7Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls_gen_connection module) allows a network-positioned attCheck if you run itEPSS 0.14%Jul 2, 2026
- High8.8Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Check if you run itEPSS 0.28%Jul 2, 2026
- Medium6.5Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors:…Check if you run itEPSS 0.33%Jul 2, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.38%Jul 2, 2026
- High8.1The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4.Check if you run itEPSS 0.76%Jul 2, 2026
- Medium4.3The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass…Check if you run itEPSS 0.49%Jul 2, 2026
- Unknowncreativethemes blocksy_companion Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.57%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.48%Jul 2, 2026
- UnknownIvanti automation SQL Injection: HibernatePatch nowKEVEPSS 0.90%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.28%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.52%Jul 2, 2026
- UnknownPion DTLS is a Go implementation of Datagram Transport Layer Security.Check if you run itEPSS 0.54%Jul 1, 2026
- High8.3Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM IntegrationCheck if you run itEPSS 0.55%Jul 1, 2026
- Medium6.8Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permis…Check if you run itEPSS 0.17%Jul 1, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.42%Jul 1, 2026
- Medium4.9CVE-2026-56149 is listed by Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (C…Check if you run itEPSS 0.50%Jul 1, 2026
- Medium6.5Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.47%Jul 1, 2026
- UnknownHCSEC-2026-16 - Vault Audit Device Plugin Directory Guard Bypass via Legacy Path OptionCheck if you run itEPSS 0.38%Jul 1, 2026
Sort