Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6Hackage CSRF vulnerabilityCheck if you run itEPSS 0.18%Mar 28, 2026
- UnknownSecurity exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCIIOpen the advisoryMar 28, 2026
- High7.5If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.Check if you run itEPSS 1.60%Mar 25, 2026
- High7.5An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function.Check if you run itEPSS 0.22%Mar 23, 2026
- Unknownlinux-aws-6.8 vulnerabilitiesOpen the advisoryMar 23, 2026
- Critical9.4Aquasecurity Trivy Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.68%Mar 23, 2026
- High8.8GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.86%Mar 16, 2026
- Unknownlinux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-Open the advisoryMar 16, 2026
- UnknownRisk of Buffer Overflow Vulnerability when installed from source on Windows R < 4.2Open the advisoryMar 13, 2026
- High7.5When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.Check if you run itEPSS 0.99%Mar 11, 2026
- Medium6.5curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy.Check if you run itEPSS 0.47%Mar 11, 2026
- Medium5.3When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some cirCheck if you run itEPSS 0.53%Mar 11, 2026
- High7.5Incorrect parsing of IPv6 host literals in net/urlCheck if you run itEPSS 0.83%Mar 6, 2026
- UnknownCross-site Request Forgery (CSRF) vulnerabilityOpen the advisoryFeb 18, 2026
- Unknownlinux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilitiesOpen the advisoryFeb 17, 2026
- UnknownUse-of-uninitialized-value in printAddressingModeOpen the advisoryFeb 15, 2026
- High8.2The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.Check if you run itEPSS 1.85%Jan 21, 2026
- Medium5.3When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the "base64" module the characters "+/" will always be accepted, regardless of theCheck if you run itEPSS 0.57%Jan 21, 2026
- UnknownThe imaplib module, when passed a user-controlled command, can have additional commands injected using newlines.Check if you run itEPSS 0.43%Jan 20, 2026
- Critical9.9Hackage package and doc upload stored XSS vulnerabilityCheck if you run itEPSS 0.43%Jan 16, 2026
- Medium5.3When doing TLS related transfers with reused easy or multi handles and altering the option, libcurl could accidentally reuse a CA store cached in memory for which the partial chainCheck if you run itEPSS 0.76%Jan 8, 2026
- Medium5.9When using option with libcurl or with the curl tool, curl should check the public key of the server certificate to verify the peer.Open the advisoryJan 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage adreno_show_object() is a trap! It will re-allocate the pointeCheck if you run itEPSS 0.14%Dec 30, 2025
- Critical9.8cifs: fix potential race when tree connecting ipcCheck if you run itEPSS 0.52%Dec 30, 2025
- UnknownRisk of __proto__ pollution VulnerabilityOpen the advisoryDec 23, 2025