Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A flaw was found in the OpenShift console.Check if you run itEPSS 0.53%Sep 23, 2026
- Critical9.1RabbitMQ: Trust-store whitelist by Issuer+Serial onlyCheck if you run itEPSS 0.23%Sep 23, 2026
- High8.2RabbitMQ: Web-MQTT decompression bombCheck if you run itEPSS 0.40%Sep 23, 2026
- High7.1RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated sizeCheck if you run itEPSS 0.30%Sep 23, 2026
- High7.2A flaw was found in the Ansible Automation Platform automation controller.Check if you run itEPSS 0.43%Sep 23, 2026
- Medium6.4A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend.Check if you run itEPSS 0.17%Sep 23, 2026
- Critical9.2RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetchCheck if you run itEPSS 0.20%Sep 23, 2026
- High7.3RabbitMQ: Stored XSS via TLS peer-certificate DN in management UICheck if you run itEPSS 0.15%Sep 23, 2026
- High7.1RabbitMQ: Atom-table exhaustion via reply-to queue name decodingCheck if you run itEPSS 0.33%Sep 23, 2026
- UnknownVU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlersCheck if you run itEPSS 0.18%Sep 23, 2026
- High7.5A denial-of-service flaw was found in gnome-remote-desktop.Check if you run itEPSS 0.79%Sep 23, 2026
- High8.5CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() performs no object-level RBAC.Check if you run itEPSS 0.24%Sep 23, 2026
- UnknownVU#273940: Enterprise Access Management EAM does not rotate RSA keysCheck if you run itEPSS 0.11%Sep 23, 2026
- Low2.7IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser.Check if you run itEPSS 0.19%Sep 23, 2026
- Critical9.6Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durCheck if you run itEPSS 0.27%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.46%Sep 23, 2026
- Medium6.9plex media_server Improper Neutralization of Encoded URI Schemes in a Web PagePatch nowKEVEPSS 0.46%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.46%Sep 23, 2026
- High7.8A flaw was found in sudo.Check if you run itEPSS 0.15%Sep 23, 2026
- High7.8ZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.09%Sep 23, 2026
- UnknownGitLab Critical Patch Release: 19.0.9, 18.11.12Check if you run itEPSS 0.57%Sep 23, 2026
- Medium5.5CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.25%Sep 22, 2026
- Medium4.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.59%Sep 22, 2026
- Medium6.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.72%Sep 22, 2026
- Medium4.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.59%Sep 22, 2026