Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataCheck if you run itEPSS 0.39%Jul 21, 2026
- High7.5A flaw was found in libssh.Check if you run itEPSS 0.44%Jul 21, 2026
- High7.3A flaw was found in libssh.Check if you run itEPSS 0.17%Jul 21, 2026
- High7.8i2c: stub: Reject I2C block transfers with invalid lengthCheck if you run itEPSS 0.13%Jul 20, 2026
- High7.8netfilter: ipset: fix race between dump and ip_set_list resizeCheck if you run itEPSS 0.10%Jul 20, 2026
- High7.8blk-mq: pop cached request if it is usableCheck if you run itEPSS 0.13%Jul 19, 2026
- High8.1macsec: fix replay protection at XPN lower-PN wrapCheck if you run itEPSS 0.34%Jul 19, 2026
- High7.1ipv6: validate extension header length before copying to cmsgCheck if you run itEPSS 0.17%Jul 19, 2026
- Critical9.8xfrm: esp: restore combined single-frag length gateCheck if you run itEPSS 0.71%Jul 19, 2026
- High7.1Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG functionCheck if you run itEPSS 0.12%Jul 17, 2026
- High7.1CGA-xr4w-f4q6-c8x6Open the advisoryJul 15, 2026
- High8.1Red Hat Security Advisory: nodejs22 security updateOpen the advisoryJul 15, 2026
- Medium5.5PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell CommandsCheck if you run itEPSS 0.18%Jul 13, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026
- High7.5A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin.Check if you run itEPSS 0.58%Jul 9, 2026
- High7.1A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin.Check if you run itEPSS 0.33%Jul 9, 2026
- UnknownCGA-rgpc-xmjq-vgm5Open the advisoryJul 9, 2026
- UnknownCGA-rw59-v8cv-vgh9Open the advisoryJul 9, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionCheck if you run itEPSS 0.38%Jul 8, 2026
- Low3.7A logic vulnerability was found in GStreamer's webrtcbin component.Check if you run itEPSS 0.23%Jul 7, 2026
- High8.1Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement updateOpen the advisoryJul 7, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplCheck if you run itEPSS 0.29%Jul 6, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026
- Low2.1swoosh has email-derived URL path injection in Microsoft Graph endpointCheck if you run itEPSS 0.20%Jul 6, 2026
- High8.1Red Hat Security Advisory: nodejs22 security, bug fix, and enhancement updateOpen the advisoryJul 6, 2026