Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed When retrieving the PEK C…Check if you run itEPSS 0.17%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the…Check if you run itEPSS 0.17%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for…Check if you run itEPSS 0.17%May 1, 2026
- UnknownApache brpc Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 25.52%May 1, 2026
- High8.8Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.32%Apr 28, 2026
- High8.1ProFTPD ProFTPD Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 7.31%Apr 28, 2026
- Low2.1OpenClaw before 2026.4.2 contains an improper access control vulnerability in the iOS A2UI bridge that treats generic local-network pages as trusted origins.Check if you run itEPSS 0.20%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d.Check if you run itEPSS 0.51%Apr 27, 2026
- Medium5.3Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS applicationCheck if you run itEPSS 0.22%Apr 27, 2026
- High8.8arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.Check if you run itEPSS 0.34%Apr 24, 2026
- Critical9.1Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.61%Apr 24, 2026
- Critical10.0Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.71%Apr 24, 2026
- Medium5.4Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.32%Apr 24, 2026
- Medium6.5Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.81%Apr 24, 2026
- Low3.7Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.26%Apr 24, 2026
- Medium6.9Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.97%Apr 24, 2026
- High7.5Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.38%Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.34%Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.48%Apr 24, 2026
- High7.4Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.38%Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.48%Apr 24, 2026
- High7.4Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.92%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in __mmap_region() commit 605f6586ecf7 ("mm/vma: do not leak memory when .m…Check if you run itEPSS 0.16%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vfio/xe: Reorganize the init to decouple migration from reset Attempting to issue reset on VF devic…Check if you run itEPSS 0.16%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Reject synchronizing v…Check if you run itEPSS 0.16%Apr 24, 2026