Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec.Check if you run itEPSS 0.50%Apr 29, 2026
- High7.8An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x8000…Check if you run itEPSS 0.13%Apr 29, 2026
- Medium6.8Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.12%Apr 29, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload int…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the z…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via a c…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium5.5A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8ab0f970614d42da8e566e9c0d15a16414c.Check if you run itEPSS 0.42%Apr 29, 2026
- High8.4Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption.Check if you run itEPSS 0.16%Apr 29, 2026
- High8.8Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack.Check if you run itEPSS 0.33%Apr 29, 2026
- High8.8Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus…Check if you run itEPSS 0.23%Apr 29, 2026
- High7.8Local privilege escalation due to improper input validation.Check if you run itEPSS 0.11%Apr 29, 2026
- High7.8Local privilege escalation due to improper input validation.Check if you run itEPSS 0.11%Apr 29, 2026
- Critical9.8Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints.Patch nowKEVEPSS 0.43%Apr 29, 2026
- Critical9.8TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function.Check if you run itEPSS 1.13%Apr 29, 2026
- High7.5TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function.Check if you run itEPSS 0.31%Apr 29, 2026
- Medium6.7Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.09%Apr 29, 2026
- High8.8Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass.Check if you run itEPSS 0.48%Apr 29, 2026
- Medium4.3Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phi…Check if you run itEPSS 0.21%Apr 29, 2026
- High8.0Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site scripting (XSS) vulnerabili…Check if you run itEPSS 0.28%Apr 29, 2026
- Critical9.0Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for…Check if you run itEPSS 0.28%Apr 29, 2026
- Medium4.3A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an att…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.5Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in configuration when de…Check if you run itEPSS 0.25%Apr 29, 2026
- High7.5Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide cr…Check if you run itEPSS 0.41%Apr 29, 2026
- Medium4.3A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and app…Check if you run itEPSS 0.17%Apr 29, 2026
Sort