Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.Check if you run itEPSS 1.16%Jun 8, 2026
- Medium6.1A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory conte…Check if you run itEPSS 0.48%Jun 8, 2026
- Critical9.8Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.Check if you run itEPSS 0.69%Jun 8, 2026
- Medium4.2Temporary Signed URL Path ConfusionOpen the advisoryJun 8, 2026
- Critical9.3Check Point Security Gateway Improper Authentication VulnerabilityPatch nowKEVEPSS 85.35%Jun 8, 2026
- UnknownCrocoblock jetengine Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.37%Jun 8, 2026
- UnknownWordPress Hippoo Mobile App for WooCommerce Privilege EscalationPatch nowKEVEPSS 1.84%Jun 8, 2026
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 2.44%Jun 8, 2026
- UnknownExploit:SWF/CVE-2015-0318!MTB threat description - Microsoft Security IntelligenceCheck this weekEPSS 75.16%Jun 7, 2026
- UnknownBad-cast to std::__shared_weak_count from invalid vptrOpen the advisoryJun 7, 2026
- High8.6An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privileg…Check if you run itEPSS 0.50%Jun 5, 2026
- UnknownVantage6: 2FA can be circumvented with hacked email accessCheck if you run itEPSS 0.28%Jun 5, 2026
- LowVantage6: No limit on emails sent for password/MFA resetCheck if you run itEPSS 0.28%Jun 5, 2026
- High7.8A flaw was found in ansible-core.Check if you run itEPSS 0.22%Jun 5, 2026
- Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityPatch nowKEVEPSS 85.44%Jun 5, 2026
- High7.2Docker: executes container binary on the hostCheck if you run itEPSS 0.15%Jun 5, 2026
- UnknownImproper Validation of Specified Quantity in InputPatch nowKEVEPSS 1.66%Jun 5, 2026
- High8.8A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/lib/sockets/sockets_tls.c).Check if you run itEPSS 0.32%Jun 4, 2026
- Medium6.3An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitation.c) leads to an out-of-bounds write.Check if you run itEPSS 0.26%Jun 4, 2026
- Critical9.2SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages.Check if you run itEPSS 0.54%Jun 4, 2026
- Critical9.6WWBN AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket PluginCheck if you run itEPSS 0.38%Jun 4, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityPatch nowKEVEPSS 25.32%Jun 4, 2026
- UnknownHPESBNW05062 rev.1 - Status of OpenSSH Keystroke Obfuscation Bypass (CVE-2024-39894) on ArubaOS-CXCheck if you run itEPSS 1.63%Jun 4, 2026
- High7.5SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityPatch nowKEVEPSS 43.65%Jun 4, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityPatch nowKEVEPSS 99.79%Jun 4, 2026
Sort