Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Jexactyl is a customisable game management panel and billing system.Check if you run itEPSS 0.25%Mar 20, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix page array leak d9f595b9a65e ("io_uring/zcrx: fix leaking pages on sg init fail"…Check if you run itEPSS 0.10%Mar 18, 2026
- Medium6.9dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_a…Check if you run itEPSS 0.18%Mar 17, 2026
- Low1.9A weakness has been identified in GPAC 26.03-DEV.Check if you run itEPSS 0.18%Mar 12, 2026
- Medium6.0Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenti…Check if you run itEPSS 0.76%Mar 10, 2026
- Low2.1A vulnerability was detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.70%Mar 9, 2026
- Low2.1A security vulnerability has been detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.71%Mar 9, 2026
- Low2.1A weakness has been identified in Bytedesk up to 1.3.9.Check if you run itEPSS 0.70%Mar 8, 2026
- Low2.1A security flaw has been discovered in Bytedesk up to 1.3.9.Check if you run itEPSS 0.69%Mar 8, 2026
- High7.5A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-11), interpreter using the o…Check if you run itEPSS 0.29%Mar 6, 2026
- Critical9.5Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover.Check if you run itEPSS 0.40%Mar 5, 2026
- High7.8kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.Check if you run itEPSS 0.20%Mar 4, 2026
- Medium5.3A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38.Check if you run itEPSS 4.49%Mar 3, 2026
- Medium5.5A flaw has been found in MaxSite CMS up to 109.1.Patch nowKEVEPSS 2.47%Mar 1, 2026
- Low1.9A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1.Check if you run itEPSS 0.20%Feb 27, 2026
- Low1.9A vulnerability was found in libvips 8.19.0.Check if you run itEPSS 0.20%Feb 27, 2026
- Low1.9A vulnerability has been found in libvips 8.19.0.Check if you run itEPSS 0.21%Feb 27, 2026
- Low1.9A flaw has been found in libvips 8.19.0.Check if you run itEPSS 0.21%Feb 27, 2026
- Medium5.7SteVe is an open-source EV charging station management system.Check if you run itEPSS 0.29%Feb 26, 2026
- Medium6.3Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB State string parsing.Check if you run itEPSS 0.28%Feb 26, 2026
- Medium6.3Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils.Check if you run itEPSS 0.31%Feb 26, 2026
- High7.0An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: * gain access to possible…Check if you run itEPSS 0.15%Feb 25, 2026
- High7.8TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.27%Feb 20, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" This reverts commit…Check if you run itEPSS 0.33%Jan 13, 2026
- Low1.9A weakness has been identified in Open5GS up to 2.7.6.Check if you run itEPSS 0.23%Jan 2, 2026