Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1An issue was discovered in GStreamer gst-plugins-good before 1.28.2.Check if you run itEPSS 0.35%May 14, 2026
- Medium5.3Successfully using libcurl to do a transfer over a specific HTTP proxy ( ) with **Digest** authentication and then changing the proxy host to a second one ( ) for a second transferCheck if you run itEPSS 0.47%May 13, 2026
- Medium5.3When asked to both use a file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstanCheck if you run itEPSS 0.52%May 13, 2026
- High7.5Using libcurl, when a custom header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom header set, the sCheck if you run itEPSS 0.35%May 13, 2026
- Medium6.5libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host.Check if you run itEPSS 0.41%May 13, 2026
- Medium5.9A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool.Check if you run itEPSS 0.36%May 13, 2026
- Low2.1Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1Check if you run itEPSS 0.21%May 11, 2026
- UnknownUse-of-uninitialized-value in jxl::PerformMulBlendingOpen the advisoryMay 11, 2026
- High7.8thermal: core: Fix thermal zone device registration error pathCheck if you run itEPSS 0.13%May 8, 2026
- High7.5Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCheck if you run itEPSS 0.78%May 7, 2026
- High8.8Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryMay 6, 2026
- UnknownHeap-use-after-free in insertkeyOpen the advisoryMay 2, 2026
- UnknownHeap-buffer-overflow in lj_record_idxOpen the advisoryApr 30, 2026
- Critical10.0Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesCheck if you run itEPSS 0.21%Apr 24, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoCheck if you run itEPSS 0.36%Apr 14, 2026
- High7.2web3.py allows you to interact with the Ethereum blockchain using Python.Check if you run itEPSS 0.31%Apr 9, 2026
- UnknownCabal deletes project source files during configureOpen the advisoryApr 8, 2026
- UnknownSecurity exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.cloneOpen the advisoryApr 7, 2026
- High7.1kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file writeCheck if you run itEPSS 0.39%Apr 6, 2026
- High7.2Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassCheck if you run itEPSS 0.34%Apr 4, 2026
- Unknownlinux-raspi, linux-raspi-realtime vulnerabilitiesOpen the advisoryApr 1, 2026
- Critical9.8lodash vulnerable to Code Injection via imports key namesCheck if you run itEPSS 2.62%Mar 31, 2026
- Medium6.5The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.Check if you run itEPSS 0.40%Mar 31, 2026
- High7.5JOSE is a Javascript Object Signing and Encryption (JOSE) library.Check if you run itEPSS 0.19%Mar 31, 2026
- Critical9.9Hackage package metadata stored XSS vulnerabilityCheck if you run itEPSS 0.43%Mar 28, 2026