Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.16%Oct 12, 2026
- Medium4.6GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configuratiCheck if you run itEPSS 0.09%Oct 12, 2026
- UnknownImportant: kernel security updateOpen the advisoryOct 12, 2026
- High7.8The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData().Check if you run itEPSS 0.11%Oct 11, 2026
- High7.8The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c declared two variab…Check if you run itEPSS 0.12%Oct 11, 2026
- Medium6.8The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK…Check if you run itEPSS 0.17%Oct 11, 2026
- Low3.4The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion.Check if you run itEPSS 0.11%Oct 11, 2026
- Medium5.3Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs.Check if you run itEPSS 0.28%Oct 11, 2026
- High7.2pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members t…Check if you run itEPSS 0.38%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any authenticated user to rea…Open the advisoryOct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated users to del…Check if you run itEPSS 0.21%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any authenticated user to delete…Open the advisoryOct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint that allows any authenticated user to modify lo…Check if you run itEPSS 0.19%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows authenticated users to read other users' AI ch…Open the advisoryOct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler that allows any authenticated user to modify us…Check if you run itEPSS 0.19%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or remove department heads by calling PUT /sys/user…Open the advisoryOct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler that allows low-privileged authenticated users to…Check if you run itEPSS 0.17%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send system announcements by calling POST /sys…Open the advisoryOct 11, 2026
- Medium5.3A vulnerability was detected in erzhongxmu Jeewms up to 3.7.Check if you run itEPSS 0.26%Oct 11, 2026
- Low2.1A weakness has been identified in zhayujie CowAgent up to 2.1.6.Check if you run itEPSS 0.40%Oct 11, 2026
- High8.8AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 serv…Check if you run itEPSS 0.32%Oct 11, 2026
- Low2.3iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paus…Open the advisoryOct 11, 2026
- Critical9.3BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key…Check if you run itEPSS 0.48%Oct 11, 2026
- High8.7mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sen…Open the advisoryOct 11, 2026
- Medium5.3UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary app…Check if you run itEPSS 0.22%Oct 11, 2026