Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Nginx UI is a web user interface for the Nginx web server.Open the advisoryOct 9, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Open the advisoryOct 9, 2026
- High8.1Nginx UI is a web user interface for the Nginx web server.Open the advisoryOct 9, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Open the advisoryOct 9, 2026
- High8.6SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount…Check if you run itEPSS 0.61%Oct 9, 2026
- High8.5Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve…Check if you run itEPSS 0.08%Oct 9, 2026
- Medium6.3Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement…Check if you run itEPSS 0.21%Oct 9, 2026
- High7.1HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to th…Check if you run itEPSS 0.27%Oct 9, 2026
- Critical9.4Nginx UI is a web user interface for the Nginx web server.Open the advisoryOct 9, 2026
- High7.5Nginx UI is a web user interface for the Nginx web server.Open the advisoryOct 9, 2026
- Medium5.4A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon.Check if you run itEPSS 0.14%Oct 9, 2026
- UnknownMalicious code in pxnpm (npm)Open the advisoryOct 9, 2026
- High8.8Improper input validation vulnerability in Apache Camel Karavan.Check if you run itEPSS 0.39%Oct 9, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.Check if you run itEPSS 0.52%Oct 9, 2026
- Unknownzip: creates symbolic links whose attacker-controlled targets are outside the destination directoryOpen the advisoryOct 9, 2026
- High7.3Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege EscalationOpen the advisoryOct 9, 2026
- UnknownSecurity update for unboundOpen the advisoryOct 9, 2026
- UnknownSecurity update for python-PyJWTOpen the advisoryOct 9, 2026
- Critical9.1Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCo…Check if you run itEPSS 0.19%Oct 9, 2026
- High8.1Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain mul…Check if you run itEPSS 0.32%Oct 9, 2026
- High7.5By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document.Check if you run itEPSS 0.46%Oct 9, 2026
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…Check if you run itEPSS 0.20%Oct 9, 2026
- High7.5In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attac…Check if you run itEPSS 0.56%Oct 9, 2026
- High7.2Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability.Check if you run itEPSS 0.30%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026