Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays.Check if you run itEPSS 0.38%Jun 12, 2026
- Medium6.5A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad).Check if you run itEPSS 0.23%Jun 11, 2026
- Medium6.5An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.Check if you run itEPSS 0.21%Jun 11, 2026
- Critical9.8CVE-2026-49261 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 1.58%Jun 11, 2026
- Medium5.0An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c.Check if you run itEPSS 0.27%Jun 11, 2026
- Low3.7Unvalidated request path concatenated into authority poisons request.url.hostnameCheck if you run itEPSS 0.27%Jun 11, 2026
- UnknownCGA-wpfp-vg5v-29prOpen the advisoryJun 11, 2026
- Unknownslicewp affiliate_program_suite Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.14%Jun 11, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.39%Jun 11, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.68%Jun 10, 2026
- High7.5A flaw was found in dracut.Check if you run itEPSS 1.27%Jun 10, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationCheck if you run itEPSS 0.77%Jun 10, 2026
- UnknownBIG-IP SIP ALG profile vulnerability CVE-2025-20045Check if you run itEPSS 0.41%Jun 10, 2026
- UnknownCVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationCheck if you run itEPSS 0.29%Jun 10, 2026
- UnknownCVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCheck if you run itEPSS 0.14%Jun 10, 2026
- UnknownCVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on LinuxCheck if you run itEPSS 0.10%Jun 10, 2026
- UnknownCVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingCheck if you run itEPSS 0.22%Jun 10, 2026
- UnknownCVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOSCheck if you run itEPSS 0.10%Jun 10, 2026
- UnknownCVE-2026-0270 Cortex XSOAR: Path Traversal VulnerabilityCheck if you run itEPSS 0.20%Jun 10, 2026
- UnknownCVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UICheck if you run itEPSS 1.34%Jun 10, 2026
- UnknownCVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized UsersCheck if you run itEPSS 0.11%Jun 10, 2026
- UnknownCVE-2026-0272 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)Check if you run itEPSS 0.26%Jun 10, 2026
- High7.1Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%Jun 10, 2026
- UnknownCVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2Open the advisoryJun 10, 2026
- Medium5.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in j…Check if you run itEPSS 0.18%Jun 10, 2026
Sort