Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.45%Sep 30, 2026
- UnknownImportant: nodejs:24 security, bug fix, and enhancement updateOpen the advisorySep 30, 2026
- High8.7anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking.Check if you run itEPSS 0.48%Sep 29, 2026
- Medium5.9adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different contentCheck if you run itEPSS 0.23%Sep 29, 2026
- Medium5.3adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() pathCheck if you run itEPSS 0.27%Sep 29, 2026
- Medium5.9The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition.Check if you run itEPSS 0.18%Sep 29, 2026
- High8.2A flaw was found in libsoup.Check if you run itEPSS 0.37%Sep 29, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)Check if you run itEPSS 0.38%Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationCheck if you run itEPSS 0.31%Sep 29, 2026
- Medium6.3ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c.Check if you run itEPSS 0.32%Sep 29, 2026
- Medium5.9libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.Check if you run itEPSS 0.35%Sep 29, 2026
- Unknownurllib3 is an HTTP client library for Python.Check if you run itEPSS 0.29%Sep 29, 2026
- High8.6A flaw was found in libsoup.Check if you run itEPSS 0.27%Sep 29, 2026
- Medium6.8NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface…Check if you run itEPSS 0.15%Sep 29, 2026
- UnknownImproper parsing of fractional NumericDate from JWT exp claimsOpen the advisorySep 29, 2026
- High8.1Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.Check if you run itEPSS 0.10%Sep 29, 2026
- Medium6.5Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability.Check if you run itEPSS 0.20%Sep 29, 2026
- Critical9.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability.Check if you run itEPSS 0.11%Sep 29, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.08%Sep 29, 2026
- Medium6.7Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability.Check if you run itEPSS 0.09%Sep 29, 2026
- UnknownBaicells Nova 430HCheck if you run itEPSS 0.16%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Sep 29, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Sep 29, 2026
- Low2.1A vulnerability was identified in Eleveo Call Recording Software 9.7.0.Check if you run itEPSS 0.22%Sep 28, 2026
- Low2.1A vulnerability has been found in Eleveo Quality Management 9.7.0.Check if you run itEPSS 0.34%Sep 28, 2026