Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownVU#762428: Authlib library contains a signature‑verification bypass vulnerabilityCheck if you run itEPSS 0.28%Sep 28, 2026
- High8.2Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy().Check if you run itEPSS 0.43%Sep 28, 2026
- High8.8Apple Multiple Products Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 1.24%Sep 28, 2026
- High7.1Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.14%Sep 27, 2026
- Medium5.1Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.Check if you run itEPSS 0.16%Sep 27, 2026
- High8.5Edgelesssys Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.21%Sep 27, 2026
- Medium6.9Contrast is a Kubernetes runtime for confidential containers.Check if you run itEPSS 0.07%Sep 27, 2026
- Critical9.5Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming…Check if you run itEPSS 0.47%Sep 26, 2026
- High8.3Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-typ…Check if you run itEPSS 0.26%Sep 26, 2026
- High8.3vLLM is an inference and serving engine for large language models.Check if you run itEPSS 0.27%Sep 26, 2026
- Unknownis unmaintainedOpen the advisorySep 26, 2026
- UnknownCVE-2026-100419 affecting package rust for versions less than 1.75.0-30Open the advisorySep 25, 2026
- High7.5cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit.Open the advisorySep 25, 2026
- UnknownCVE-2026-18320 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Check if you run itEPSS 0.16%Sep 25, 2026
- UnknownCVE-2026-18312 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Check if you run itEPSS 0.19%Sep 25, 2026
- UnknownCVE-2026-18311 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Check if you run itEPSS 0.16%Sep 25, 2026
- High8.2RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoSCheck if you run itEPSS 0.42%Sep 25, 2026
- High8.2RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /loginCheck if you run itEPSS 0.14%Sep 25, 2026
- High8.8IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limi…Check if you run itEPSS 0.58%Sep 25, 2026
- High8.8IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format.Check if you run itEPSS 0.24%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail after a lower-devi…Check if you run itEPSS 0.11%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If map_addr() change…Check if you run itEPSS 0.11%Sep 25, 2026
- Unknown[20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatchCheck if you run itEPSS 0.27%Sep 25, 2026
- Unknown[20260908] - Core - XSS in HTML Mail TemplatesCheck if you run itEPSS 0.20%Sep 25, 2026
- High8.8D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint.Check if you run itEPSS 1.29%Sep 25, 2026