Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation.Check if you run itEPSS 0.40%Aug 21, 2026
- Medium6.9The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in requests to users, allowing a remote, unauthentica…Check if you run itEPSS 0.53%Aug 21, 2026
- High8.2A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0.Check if you run itEPSS 0.10%Aug 21, 2026
- Unknown[20260806] - Core - XSS through schema.org outputsCheck if you run itEPSS 0.27%Aug 17, 2026
- Unknown[20260805] - Core - Improper ACL checks for category webservice endpointsCheck if you run itEPSS 0.26%Aug 17, 2026
- Medium4.3The ECS WordPress plugin before 4.3.13 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who…Check if you run itEPSS 0.25%Aug 15, 2026
- Medium4.7Linux Foundationのbackstage/plugin-auth-backendにおけるオープンリダイレクトの脆弱性Check if you run itEPSS 0.17%Aug 13, 2026
- Unknownwebreinvent vaahcms Embedded Malicious CodePatch nowKEVEPSS 0.76%Jul 29, 2026
- High7.8The userspace verifier z_vrfy_log_filter_set() for the log_filter_set syscall in subsys/logging/log_mgmt.c performed a signed comparison against the int16_t src_id par…Check if you run itEPSS 0.17%Jul 27, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 5.61%Jul 27, 2026
- High7.0In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the global _thread_idx…Check if you run itEPSS 0.11%Jul 25, 2026
- High8.2OmniFaces is a utility library for Faces.Check if you run itEPSS 0.31%Jul 24, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.43%Jul 18, 2026
- Medium5.5The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kernel/thread.c) calls k_object_find() on the caller…Check if you run itEPSS 0.15%Jul 14, 2026
- High7.8Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a doubly-linked list (obj_list) of dynamically allocated…Check if you run itEPSS 0.15%Jul 12, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026
- Low3.1The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PIC32CM-JH SoC family, contains an out-of-bounds write in its asynchronous (DMA…Check if you run itEPSS 0.22%Jun 28, 2026
- Medium6.5The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications.Check if you run itEPSS 0.30%Jun 28, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.62%Jun 27, 2026
- Medium5.3Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashes or dy…Check if you run itEPSS 0.60%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic [1] [2].Check if you run itEPSS 0.14%Jun 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: restrict several matches to inet family This is a partial revert of: commit ab4…Check if you run itEPSS 0.13%Jun 24, 2026
- UnknownLangflow Langflow Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 41.70%Jun 24, 2026
- High7.5Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime.Check if you run itEPSS 0.51%Jun 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2node().Check if you run itEPSS 0.12%Jun 3, 2026