Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in curr…Check if you run itEPSS 0.22%Apr 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_op…Check if you run itEPSS 0.17%Apr 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait() The async_hold queue pins encrypted input skbs wh…Check if you run itEPSS 0.37%Apr 2, 2026
- High8.2ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.16%Apr 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: defer hook memory release until rcu readers are done Yiming Qian reports UaF when c…Check if you run itEPSS 0.16%Apr 2, 2026
- Medium5.5A vulnerability was identified in SourceCodester Leave Application System 1.0.Check if you run itEPSS 0.42%Apr 2, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing.Check if you run itEPSS 0.63%Apr 2, 2026
- Low2.9A vulnerability was determined in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.65%Apr 2, 2026
- Low2.9A vulnerability was found in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.73%Apr 2, 2026
- Medium5.3An unauthenticated remote attacker can access a configuration file containing database credentials.Check if you run itEPSS 0.27%Apr 2, 2026
- High7.5An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper neutralization of special e…Check if you run itEPSS 0.34%Apr 2, 2026
- Critical9.1An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special element…Check if you run itEPSS 0.42%Apr 2, 2026
- High7.5An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutralization of special element…Check if you run itEPSS 0.34%Apr 2, 2026
- High8.8Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the generateSrpArray function, resu…Check if you run itEPSS 0.52%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters.Check if you run itEPSS 0.22%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control…Check if you run itEPSS 0.25%Apr 2, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.Check if you run itEPSS 0.13%Apr 2, 2026
- High7.7SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such as [signed OK].Check if you run itEPSS 0.22%Apr 2, 2026
- High7.7SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding…Check if you run itEPSS 0.12%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to reset a victim account password.Check if you run itEPSS 0.28%Apr 2, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own.Check if you run itEPSS 0.22%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long subject.Check if you run itEPSS 0.19%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates.Check if you run itEPSS 0.10%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization.Check if you run itEPSS 0.26%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictions.Check if you run itEPSS 0.23%Apr 2, 2026
Sort