431
CVEs
33
Critical
144
High
0
KEV
102
PoC
58
Unpatched C/H
57.1%
Patch Rate
1.1%
Avg EPSS
Severity Breakdown
CRITICAL
33
HIGH
144
MEDIUM
237
LOW
16
Monthly CVE Trend
Affected Products (30)
Yocto
112
Android
110
Openwrt
47
Rdk B
36
Iot Yocto
34
Kubernetes
32
Pytorch
28
Fedora
27
Magma
22
Nats Server
22
AI / ML
21
Debian Linux
21
Containerd
20
Linux Kernel
19
Ubuntu Linux
14
Cups Filters
14
Runc
14
Everest
13
Docker
13
Dragonfly
12
Backstage
11
Harbor
10
Ceph
8
Kubeedge
8
Software Development Kit
7
Python
7
Java
7
Cubefs
6
Ceph Storage
6
Edge Virtualization Engine
5
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2024-21626 | Alpine Linux: runc fixed in 1.1.12-r0 | HIGH | 8.6 | 5.5% | 83 |
PoC
|
| CVE-2015-3258 | Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 37.1% and no vendor patch available. | HIGH | 7.5 | 37.1% | 75 |
No patch
|
| CVE-2015-3279 | Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 34.5% and no vendor patch available. | HIGH | 7.5 | 34.5% | 72 |
No patch
|
| CVE-2024-48063 | In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 1.6% | 71 |
PoC
|
| CVE-2026-24124 | Dragonfly P2P file distribution system versions 2.4.1-rc.0 and below have a missing authentication vulnerability allowing unauthenticated access to the management API. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
|
| CVE-2026-25996 | String filter bypass in Inspektor Gadget Kubernetes eBPF tooling before fix. Insufficient string escaping enables filter injection. PoC and patch available. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
|
| CVE-2019-1010245 | The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available. | CRITICAL | 9.8 | 3.6% | 69 |
PoC
|
| CVE-2019-1010234 | The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 1.7% | 69 |
PoC
No patch
|
| CVE-2021-39228 | Tremor is an event processing system for unstructured data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available. | CRITICAL | 9.8 | 1.3% | 69 |
PoC
|
| CVE-2021-23450 | All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available. | CRITICAL | 9.8 | 30.4% | 69 |
PoC
|
| CVE-2022-45907 | In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available. | CRITICAL | 9.8 | 1.2% | 69 |
PoC
|
| CVE-2026-24747 | PyTorch is a Python package that provides tensor computation. [CVSS 8.8 HIGH] | HIGH | 8.8 | 0.0% | 64 |
PoC
|
| CVE-2023-24805 | cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available. | HIGH | 8.8 | 3.7% | 64 |
PoC
|
| CVE-2024-5187 | A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 1.2% | 64 |
PoC
|
| CVE-2021-41131 | python-tuf is a Python reference implementation of The Update Framework (TUF). Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required. Public exploit code available. | HIGH | 8.7 | 1.4% | 64 |
PoC
|