Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolCheck if you run itEPSS 0.30%Jun 19, 2026
- Critical9.6NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing.Check if you run itEPSS 0.35%Jun 18, 2026
- High7.8A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled envirCheck if you run itEPSS 0.16%Jun 18, 2026
- High7.0util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.11%Jun 17, 2026
- UnknownStack-use-after-scope in StreamReader_CApi::wait_for_file_sizeOpen the advisoryJun 17, 2026
- UnknownCVE-2026-39043Open the advisoryJun 16, 2026
- UnknownCVE-2026-39044Open the advisoryJun 16, 2026
- High7.6A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good.Check if you run itEPSS 0.38%Jun 15, 2026
- High7.1A signed integer overflow vulnerability was found in GStreamer's VMnc decoder.Check if you run itEPSS 0.39%Jun 15, 2026
- High8.8A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client).Check if you run itEPSS 0.64%Jun 15, 2026
- High7.1An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad.Check if you run itEPSS 0.63%Jun 15, 2026
- Medium6.5A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad.Check if you run itEPSS 0.71%Jun 15, 2026
- Medium6.5A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad).Check if you run itEPSS 0.40%Jun 11, 2026
- Medium6.5An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.Check if you run itEPSS 0.37%Jun 11, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationCheck if you run itEPSS 0.77%Jun 10, 2026
- UnknownCVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2Open the advisoryJun 10, 2026
- Medium6.3HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2Check if you run itEPSS 0.45%Jun 8, 2026
- UnknownBad-cast to std::__shared_weak_count from invalid vptrOpen the advisoryJun 7, 2026
- Unknowncrypton-x509-validation and crypton-x509 do not enforce X.509 Name ConstraintsCheck if you run itEPSS 0.32%Jun 3, 2026
- High7.5Quadratic complexity in WordDecoder.DecodeHeader in mimeCheck if you run itEPSS 0.56%Jun 2, 2026
- High7.8In multiple locations, there is a possible background activity launch due to a missing permission check.Check if you run itEPSS 0.07%Jun 1, 2026
- UnknownDenial of Service and Memory Exhaustion in aesonOpen the advisoryMay 22, 2026
- Critical9.6The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.Check if you run itEPSS 0.69%May 22, 2026
- UnknownUNKNOWN READ in bfd_getb32Open the advisoryMay 17, 2026
- UnknownCGA-xr3r-w3vh-4r9mOpen the advisoryMay 16, 2026