Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources.Check if you run itEPSS 0.34%Jun 9, 2026
- Medium5.9Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests.Check if you run itEPSS 0.27%Jun 9, 2026
- Medium4.2A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known s…Check if you run itEPSS 0.21%Jun 9, 2026
- High7.5IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate auth…Check if you run itEPSS 0.17%Jun 9, 2026
- Medium4.0CGA-w2qg-3339-g53wOpen the advisoryJun 9, 2026
- Medium4.0CGA-8j2q-ff75-4rfjOpen the advisoryJun 9, 2026
- High7.5Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent ConnectionsCheck if you run itEPSS 0.18%Jun 9, 2026
- High7.5Puma PROXY Protocol v1 Parser Allows Remote Memory ExhaustionCheck if you run itEPSS 0.35%Jun 8, 2026
- High8.1Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.45%Jun 8, 2026
- High7.5Windows path authorization bypass via encoded backslashCheck if you run itEPSS 0.62%Jun 8, 2026
- Medium4.2Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.25%Jun 8, 2026
- High8.7Tenda f451_firmware Improper Neutralization of Special Elements used in a CommandPatch nowKEVEPSS 1.61%Jun 8, 2026
- Medium4.0CGA-x69j-89hf-qx4vOpen the advisoryJun 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to take both locks i.e vm root bo a…Check if you run itEPSS 0.10%Jun 8, 2026
- High8.3In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k driver seems to do an array-index…Check if you run itEPSS 0.24%Jun 8, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol Field Compr…Check if you run itEPSS 0.45%Jun 8, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_release_queue_work() runs on nvm…Check if you run itEPSS 0.35%Jun 8, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->con…Check if you run itEPSS 0.32%Jun 8, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executing ->ioctl handler or ->release h…Check if you run itEPSS 0.08%Jun 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow i…Check if you run itEPSS 0.14%Jun 8, 2026
- UnknownCVE-2026-43966 affecting package rabbitmq-server for versions less than 3.13.7-8Open the advisoryJun 8, 2026
- High7.7STACKIT IaaS API contains a missing authorization check in the PUT servers service-accounts endpoint.Check if you run itEPSS 0.25%Jun 8, 2026
- Medium6.3HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2Check if you run itEPSS 0.26%Jun 8, 2026
- High7.5HTTP/2 Bomb CVE-2026-49975Check this weekEPSS 32.95%Jun 8, 2026
- High7.3Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.Check if you run itEPSS 0.48%Jun 8, 2026
Sort