Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.33%Oct 7, 2026
- High7.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.32%Oct 7, 2026
- Medium5.3ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.37%Oct 7, 2026
- Medium6.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.22%Oct 7, 2026
- UnknownCisco Finesse Server-Side Request Forgery VulnerabilityCheck if you run itEPSS 0.47%Oct 7, 2026
- UnknownCisco NX-OS Software Python Sandbox Escape VulnerabilityCheck if you run itEPSS 0.11%Oct 7, 2026
- UnknownMalicious code in @ikyyjee/ikkysingle (npm)Open the advisoryOct 7, 2026
- Unknownlibexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c.Check if you run itEPSS 0.55%Oct 7, 2026
- Critical9.8The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users.Check if you run itEPSS 0.40%Oct 7, 2026
- Critical9.8Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transportOpen the advisoryOct 7, 2026
- High8.1ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len without first ch…Check if you run itEPSS 0.21%Oct 7, 2026
- Medium6.5A flaw was found in pulp-ansible's bearer-token refresh for collection remotes.Check if you run itEPSS 0.23%Oct 7, 2026
- Medium6.5A flaw was found in pulp-container when it authenticates to an upstream registry.Check if you run itEPSS 0.23%Oct 7, 2026
- UnknownCritical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge PluginPatch nowKEVEPSS 0.31%Oct 7, 2026
- Low2.2In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.Check if you run itEPSS 0.14%Oct 7, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1Patch nowKEVEPSS 0.48%Oct 7, 2026
- Medium4.9Backstage is an open framework for building developer portals.Check if you run itEPSS 0.29%Oct 6, 2026
- High8.1Backstage is an open framework for building developer portals.Check if you run itEPSS 0.28%Oct 6, 2026
- High7.8A flaw was found in Ghostscript.Check if you run itEPSS 0.18%Oct 6, 2026
- Medium5.4Gitea container registry stored XSS through blob media typeCheck if you run itEPSS 0.19%Oct 6, 2026
- High7.7When was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions.Check if you run itEPSS 0.17%Oct 6, 2026
- High8.2Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.Check if you run itEPSS 0.13%Oct 6, 2026
- High8.2Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.14%Oct 6, 2026
- Medium5.3Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive infor…Check if you run itEPSS 0.22%Oct 6, 2026
- High8.8Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page.Check if you run itEPSS 0.28%Oct 6, 2026