Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme.Check if you run itEPSS 0.32%May 2, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.37%May 2, 2026
- Low2.1A vulnerability was determined in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.37%May 2, 2026
- Medium5.3The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0.Check if you run itEPSS 0.51%May 2, 2026
- Low2.1A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.Check if you run itEPSS 0.47%May 1, 2026
- Low2.1A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.Check if you run itEPSS 0.41%May 1, 2026
- Medium6.3Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections.Check if you run itEPSS 0.52%May 1, 2026
- Medium6.3Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers.Check if you run itEPSS 0.55%May 1, 2026
- Low2.1A security flaw has been discovered in TimBroddin astro-mcp-server up to 1.1.1.Check if you run itEPSS 0.32%May 1, 2026
- Medium6.5A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a…Check if you run itEPSS 1.46%May 1, 2026
- High7.5AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library.Check if you run itEPSS 0.53%May 1, 2026
- High8.8miaofng/uds-c commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a (2016-10-05) contains a stack buffer overflow in send_diagnostic_request.Check if you run itEPSS 0.41%May 1, 2026
- High7.5AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library.Check if you run itEPSS 0.53%May 1, 2026
- High7.8AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vulnerability in the supervision Do command.Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target_reset handler tcm_loop_target_reset() violates the…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses match the request It is possible for a malicious…Check if you run itEPSS 0.12%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mshv: Fix error handling in mshv_region_pin The current error handling has two issues: First, pin_u…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load Load Long Term Keys stores the user-provided enc_siz…Check if you run itEPSS 0.13%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate mesh send advertising payload length mesh_send() currently bounds MGMT_OP…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is released, the device sends…Check if you run itEPSS 0.18%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder pat…Check if you run itEPSS 0.28%May 1, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: move wake reason storage into validated event handlers hci_store_wake_reason(…Check if you run itEPSS 0.34%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few lines down…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: comedi: me_daq: Fix potential overrun of firmware buffer loads the firmware that was requested by .Check if you run itEPSS 0.18%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of firmware buffer loads the firmware that was requested by .Check if you run itEPSS 0.18%May 1, 2026