Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.2FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py.Check if you run itEPSS 0.42%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop tp_meter sessions during mesh teardown TP meter sessions remain linked on bat_priv…Check if you run itEPSS 0.14%May 28, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and recei…Check if you run itEPSS 0.81%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl Just like in a previous problem in th…Check if you run itEPSS 0.17%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblp_ctrl_msg() collapses the…Check if you run itEPSS 0.17%May 28, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and queue teardown nvmet_tcp_handle_icreq() updates queu…Check if you run itEPSS 0.40%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo rtnl_fill_vfinfo…Check if you run itEPSS 0.17%May 28, 2026
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a (potentially corrupted) mess…Check if you run itEPSS 0.53%May 28, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: block: add pgmap check to biovec_phys_mergeable biovec_phys_mergeable() is used by the request merg…Check if you run itEPSS 0.49%May 28, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads atomic_write_reply() at drivers/infiniband/sw/rxe…Check if you run itEPSS 0.47%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Limit NVMe request size to 2 MiB The HBA firmware reports NVMe MDTS values based on…Check if you run itEPSS 0.17%May 28, 2026
- Medium4.3The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) plugin for WordPress is vulnerable to Cross-Site Reque…Check if you run itEPSS 0.20%May 28, 2026
- High8.6The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to…Check if you run itEPSS 0.38%May 28, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'append_whe…Check if you run itEPSS 0.67%May 28, 2026
- Medium5.3The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for Wor…Check if you run itEPSS 0.39%May 28, 2026
- High8.1The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Deletion via SQL Injection and PHP Object I…Check if you run itEPSS 0.37%May 28, 2026
- Medium5.3A flaw was found in Keycloak's ClientRegistrationAuth component.Check if you run itEPSS 0.72%May 28, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.90%May 28, 2026
- Medium4.3The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7.Check if you run itEPSS 0.20%May 28, 2026
- Medium6.5The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1.Check if you run itEPSS 0.41%May 28, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.57%May 28, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.26%May 28, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.37%May 28, 2026
- Medium6.5The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9.Patch nowKEVEPSS 0.44%May 28, 2026
- Critical10.0free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.56%May 27, 2026