Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClientCheck if you run itEPSS 0.53%Oct 1, 2026
- MediumRabbitMQ OAuth credential refresh retains revoked runtime tagsCheck if you run itEPSS 0.23%Oct 1, 2026
- MediumRabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_statusCheck if you run itEPSS 0.29%Oct 1, 2026
- MediumRabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float expCheck if you run itEPSS 0.34%Oct 1, 2026
- MediumRabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission checkCheck if you run itEPSS 0.34%Oct 1, 2026
- HighRabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UICheck if you run itEPSS 0.16%Oct 1, 2026
- Medium6.1A flaw was found in oauth-proxy.Check if you run itEPSS 0.28%Oct 1, 2026
- High8.8ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.29%Oct 1, 2026
- UnknownHeap-buffer-overflow in load_u64Open the advisoryOct 1, 2026
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityPatch nowKEVEPSS 2.20%Oct 1, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Oct 1, 2026
- Medium6.1An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size.Check if you run itEPSS 0.21%Sep 30, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanCheck if you run itEPSS 0.37%Sep 30, 2026
- Low2.1[SECURITY] [DSA 6550-1] ghostscript security updateCheck if you run itEPSS 0.52%Sep 30, 2026
- UnknownA vulnerability was determined in Blosc C-Blosc2 up to 3.3.2.Check if you run itEPSS 0.28%Sep 30, 2026
- High7.6PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.Check if you run itEPSS 0.21%Sep 30, 2026
- UnknownCVE-2026-103111 affecting package rust for versions less than 1.75.0-30Open the advisorySep 30, 2026
- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 30, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 1.82%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityPatch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Sep 30, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.45%Sep 30, 2026
- UnknownImportant: nodejs:24 security, bug fix, and enhancement updateOpen the advisorySep 30, 2026
- High8.7anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking.Check if you run itEPSS 0.48%Sep 29, 2026