Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1CVE-2026-53722 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.29%Jun 12, 2026
- Medium6.3CVE-2026-47200 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.23%Jun 12, 2026
- Low2.3CVE-2026-46342 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.09%Jun 12, 2026
- Medium5.3CVE-2026-45669 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.18%Jun 12, 2026
- Critical9.5SimpleHelp Authentication Bypass VulnerabilityPatch nowKEVEPSS 80.25%Jun 12, 2026
- Critical9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of…Check if you run itEPSS 0.53%Jun 12, 2026
- High7.5request.form() limits silently ignored for application/x-www-form-urlencoded enable DoSCheck if you run itEPSS 0.48%Jun 12, 2026
- High8.7A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays.Check if you run itEPSS 0.38%Jun 12, 2026
- Medium6.5A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad).Check if you run itEPSS 0.23%Jun 11, 2026
- Medium6.5An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.Check if you run itEPSS 0.21%Jun 11, 2026
- Critical9.8CVE-2026-49261 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 1.58%Jun 11, 2026
- Medium5.0An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c.Check if you run itEPSS 0.27%Jun 11, 2026
- Medium5.3Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured.Check if you run itEPSS 0.09%Jun 11, 2026
- Medium5.0Spring Boot's Mail auto-configuration does not enable hostname verification.Check if you run itEPSS 0.12%Jun 11, 2026
- Low3.7Unvalidated request path concatenated into authority poisons request.url.hostnameCheck if you run itEPSS 0.27%Jun 11, 2026
- UnknownCGA-wpfp-vg5v-29prOpen the advisoryJun 11, 2026
- Unknownslicewp affiliate_program_suite Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.14%Jun 11, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.39%Jun 11, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 96.68%Jun 10, 2026
- High7.5A flaw was found in dracut.Check if you run itEPSS 1.27%Jun 10, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationCheck if you run itEPSS 0.77%Jun 10, 2026
- UnknownBIG-IP SIP ALG profile vulnerability CVE-2025-20045Check if you run itEPSS 0.41%Jun 10, 2026
- UnknownCVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationCheck if you run itEPSS 0.29%Jun 10, 2026
- UnknownCVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCheck if you run itEPSS 0.14%Jun 10, 2026
- UnknownCVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on LinuxCheck if you run itEPSS 0.10%Jun 10, 2026
Sort