Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick.Check if you run itEPSS 0.22%Apr 30, 2026
- High7.7Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA.Check if you run itEPSS 0.47%Apr 30, 2026
- Medium5.9Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely.Check if you run itEPSS 0.36%Apr 30, 2026
- High7.5In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web serverCheck if you run itEPSS 0.40%Apr 30, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to sign…Check if you run itEPSS 0.17%Apr 30, 2026
- Medium4.6LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter.Check if you run itEPSS 0.18%Apr 30, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but n…Check if you run itEPSS 0.18%Apr 30, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c The build id returned by HYPERVISOR_xen_version(XEN…Check if you run itEPSS 0.20%Apr 30, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADM…Check if you run itEPSS 0.12%Apr 30, 2026
- Medium5.3The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due…Check if you run itEPSS 0.18%Apr 30, 2026
- Medium5.3NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation.Check if you run itEPSS 0.24%Apr 30, 2026
- Medium5.9Apache Airflow's SMTP provider called Python's without an SSL context, so no certificate validation was performed on the TLS upgrade.Check if you run itEPSS 0.27%Apr 30, 2026
- UnknownCVE-2026-21240 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsanfälligkeit in Windows HTTP.sys bezüglich RechteerweiterungenCheck if you run itEPSS 0.28%Apr 30, 2026
- Critical9.8Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers.Check if you run itEPSS 0.28%Apr 30, 2026
- High8.1As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers.Check if you run itEPSS 1.42%Apr 30, 2026
- High7.8When exchanging data over a socket, libnv uses select(2) to wait for data to arrive.Check if you run itEPSS 0.15%Apr 30, 2026
- High8.1When processing the header of an incoming message, libnv failed to properly validate the message size.Check if you run itEPSS 0.32%Apr 30, 2026
- Critical9.8ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.Check if you run itEPSS 0.21%Apr 30, 2026
- High7.5Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters.Check if you run itEPSS 0.43%Apr 30, 2026
- High7.8An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers.Check if you run itEPSS 0.18%Apr 30, 2026
- Medium5.5GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCheck if you run itEPSS 0.16%Apr 30, 2026
- Medium5.5WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCheck if you run itEPSS 0.13%Apr 30, 2026
- Medium5.5SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCheck if you run itEPSS 0.12%Apr 30, 2026
- Medium5.5BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCheck if you run itEPSS 0.18%Apr 30, 2026
- Medium5.5ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCheck if you run itEPSS 0.18%Apr 30, 2026
Sort