Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSecurity update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- Medium6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0Check if you run itEPSS 0.27%Oct 5, 2026
- Medium6.9Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4Check if you run itEPSS 0.29%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0Check if you run itEPSS 0.10%Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- Medium6.7In venc, there is a possible out of bounds write due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to a missing bounds check.Check if you run itEPSS 0.11%Oct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- Medium6.7In vdec, there is a possible out of bounds write due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- UnknownD-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.06%Oct 5, 2026
- UnknownD-Link dap-1650_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.29%Oct 5, 2026
- UnknownMalicious code in @kibt/www-nuxt-i18n (npm)Open the advisoryOct 4, 2026
- Low1.8ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an a…Check if you run itEPSS 0.11%Oct 3, 2026
- UnknownRejetto hfs2 Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.78%Oct 3, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 0.59%Oct 3, 2026
- Medium5.5Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret valuesCheck if you run itEPSS 0.13%Oct 2, 2026
- Critical10.0Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chainCheck if you run itEPSS 0.36%Oct 2, 2026
- High7.5Vibe-Trading file-read tools expose arbitrary server-readable filesCheck if you run itEPSS 0.43%Oct 2, 2026
- Critical10.0Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRFCheck if you run itEPSS 0.46%Oct 2, 2026
- High7.7Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function nameCheck if you run itEPSS 0.28%Oct 2, 2026
- Medium5.3Trigger.dev: Unauthenticated Realtime Stream Data Injection via Run FriendlyIdCheck if you run itEPSS 0.27%Oct 2, 2026