Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.18%Oct 8, 2026
- Medium6.5NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation.Check if you run itEPSS 1.19%Oct 8, 2026
- Medium6.9An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.20%Oct 8, 2026
- Medium6.9A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.12%Oct 8, 2026
- Unknownvisualcomposer visual_composer_website_builder Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.87%Oct 8, 2026
- Medium4.1In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username t…Check if you run itEPSS 0.18%Oct 7, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve original s…Check if you run itEPSS 0.18%Oct 7, 2026
- Medium6.5In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of s…Check if you run itEPSS 0.27%Oct 7, 2026
- Medium6.5In Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module filtering to access a…Check if you run itEPSS 0.25%Oct 7, 2026
- High7.7In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could…Check if you run itEPSS 0.12%Oct 7, 2026
- HighLangflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersCheck if you run itEPSS 0.25%Oct 7, 2026
- High8.5PraisonAI: Crawl4AI/Chromium backend is also affected by the SSRF validation bypassCheck if you run itEPSS 0.35%Oct 7, 2026
- Medium5.5RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()Check if you run itEPSS 0.16%Oct 7, 2026
- High7.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.33%Oct 7, 2026
- High7.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.32%Oct 7, 2026
- Medium5.3ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.37%Oct 7, 2026
- Medium6.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.22%Oct 7, 2026
- UnknownCisco Finesse Server-Side Request Forgery VulnerabilityCheck if you run itEPSS 0.47%Oct 7, 2026
- UnknownCisco NX-OS Software Python Sandbox Escape VulnerabilityCheck if you run itEPSS 0.11%Oct 7, 2026
- UnknownMalicious code in @ikyyjee/ikkysingle (npm)Open the advisoryOct 7, 2026
- Unknownlibexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c.Check if you run itEPSS 0.55%Oct 7, 2026
- Critical9.8The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users.Check if you run itEPSS 0.40%Oct 7, 2026
- Critical9.8Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transportOpen the advisoryOct 7, 2026
- High8.1ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len without first ch…Check if you run itEPSS 0.21%Oct 7, 2026
- Medium6.5A flaw was found in pulp-ansible's bearer-token refresh for collection remotes.Check if you run itEPSS 0.23%Oct 7, 2026