Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by se…Check if you run itEPSS 0.43%Jun 22, 2026
- UnknownFull Disclosure: CVE-2019-11932 (double free in libpl_droidsonroids_gif) many apps vulnerableCheck this weekEPSS 44.53%Jun 22, 2026
- UnknownSocial Book Facebook Clone 2010 multiple scripts cross-site scripting CVE-2011-5190 Vulnerability ReportCheck if you run itEPSS 1.21%Jun 22, 2026
- UnknownGBU Facebook component for Joomla! index.php SQL injection CVE-2010-5056 Vulnerability ReportCheck if you run itEPSS 2.27%Jun 22, 2026
- UnknownAdvisory: WhatsApp for Android Privacy Issues with Handling of Media Files [CVE-2017-8769] | Nightwatch CybersecurityCheck if you run itEPSS 0.21%Jun 22, 2026
- Unknown894352 – (CVE-2013-0240, CVE-2013-1799) CVE-2013-0240 gnome-online-accounts: Does not check SSL certificates when creating Windows Live or Facebook accountsCheck if you run itEPSS 1.03%Jun 22, 2026
- Unknown894352 – (CVE-2013-0240, CVE-2013-1799) CVE-2013-0240 gnome-online-accounts: Does not check SSL certificates when creating Windows Live or Facebook accountsCheck if you run itEPSS 1.36%Jun 22, 2026
- Medium5.4A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable.Check if you run itEPSS 0.25%Jun 22, 2026
- Medium4.3A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints.Check if you run itEPSS 0.29%Jun 22, 2026
- High7.0libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handlingCheck if you run itEPSS 0.36%Jun 22, 2026
- High7.5Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyCheck if you run itEPSS 0.84%Jun 22, 2026
- Medium6.3ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop.Check if you run itEPSS 0.39%Jun 21, 2026
- High7.5Stack overflow in lopdf via deeply nested PDF objectsOpen the advisoryJun 21, 2026
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 20.07%Jun 20, 2026
- Highgithubtoplanguages: Command Injection via Issue Title in Discord Notification WorkflowCheck if you run itEPSS 0.53%Jun 19, 2026
- HighUni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requestsCheck if you run itEPSS 0.26%Jun 19, 2026
- High7.1libde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.37%Jun 19, 2026
- UnknownCVE-2026-9375Open the advisoryJun 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period.Check if you run itEPSS 0.14%Jun 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device.Check if you run itEPSS 0.11%Jun 19, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolCheck if you run itEPSS 0.30%Jun 19, 2026
- UnknownEntire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewindCheck if you run itEPSS 0.38%Jun 19, 2026
- MediumUnauthenticated User Enumeration via reset_passwordCheck if you run itEPSS 0.59%Jun 19, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.94%Jun 19, 2026
- High7.1MapPress Maps for WordPress Cross-Site Scripting (XSS)Patch nowKEVEPSS 0.25%Jun 19, 2026
Sort