Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.24%Jun 16, 2026
- Medium5.3Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.26%Jun 16, 2026
- Medium5.3Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.26%Jun 16, 2026
- Medium5.3Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.26%Jun 16, 2026
- High7.5Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.37%Jun 16, 2026
- Medium5.3Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.25%Jun 16, 2026
- Medium5.3Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.25%Jun 16, 2026
- Medium5.4Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.31%Jun 16, 2026
- High8.1Memory safety bug fixed in Thunderbird 152.Check if you run itEPSS 0.40%Jun 16, 2026
- UnknownCVE-2026-39043Open the advisoryJun 16, 2026
- UnknownCVE-2026-39044Open the advisoryJun 16, 2026
- High7.8Linux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 0.64%Jun 16, 2026
- Medium6.3On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintains a global list, xtensa_domain_list, of active…Check if you run itEPSS 0.16%Jun 16, 2026
- Medium6.6A flaw was found in GnuTLS.Check if you run itEPSS 0.15%Jun 16, 2026
- Medium6.5@JsonView bypass for unwrapped creator parameters in jackson-databindCheck if you run itEPSS 0.35%Jun 16, 2026
- Medium5.3@JsonView bypass for setterless creator properties in jackson-databindCheck if you run itEPSS 0.38%Jun 16, 2026
- Medium5.3Renamed @JsonIgnore'd setters can deserialize via private fields in jackson-databindCheck if you run itEPSS 0.45%Jun 16, 2026
- Medium5.3Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties in jackson-databindCheck if you run itEPSS 0.44%Jun 16, 2026
- Medium5.3InetSocketAddress deserialization triggers eager DNS resolution (SSRF) in jackson-databindCheck if you run itEPSS 0.37%Jun 16, 2026
- High8.1Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) in jackson-databindCheck if you run itEPSS 1.23%Jun 16, 2026
- High8.1PolymorphicTypeValidator bypass via generic type parameters in jackson-databind allows arbitrary class instantiationCheck if you run itEPSS 1.07%Jun 16, 2026
- UnknownShapedPlugin Pro Backdoor CompromisePatch nowKEVEPSS 0.43%Jun 16, 2026
- Medium6.5Rank Math seo Missing AuthorizationPatch nowKEVEPSS 0.29%Jun 15, 2026
- High7.5LatePoint latepoint Incorrect Privilege AssignmentPatch nowKEVEPSS 0.34%Jun 15, 2026
- High7.6A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good.Check if you run itEPSS 0.38%Jun 15, 2026
Sort