Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to per…Check if you run itEPSS 0.16%Oct 8, 2026
- Low2.1A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.14%Oct 8, 2026
- Medium6.8A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component…Check if you run itEPSS 0.14%Oct 8, 2026
- Medium5.3An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.18%Oct 8, 2026
- Medium5.4Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.Check if you run itEPSS 0.24%Oct 6, 2026
- High7.1Payload is a free and open source headless content management system.Check if you run itEPSS 0.22%Oct 6, 2026
- UnknownSavannah lwIP SMTP clientCheck if you run itEPSS 0.60%Oct 6, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeroCheck if you run itEPSS 0.36%Oct 6, 2026
- High7.0RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeedsCheck if you run itEPSS 0.13%Oct 6, 2026
- High7.1smb: client: fix potential OOB read in smb3_enum_snapshots()Check if you run itEPSS 0.43%Oct 6, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionCheck if you run itEPSS 0.13%Oct 5, 2026
- High8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a dirCheck if you run itEPSS 0.44%Oct 1, 2026
- High7.5Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of serviceCheck if you run itEPSS 0.88%Oct 1, 2026
- Medium5.3Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebCheck if you run itEPSS 0.53%Oct 1, 2026
- High7.5Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause aCheck if you run itEPSS 0.61%Oct 1, 2026
- MediumRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionCheck if you run itEPSS 0.42%Oct 1, 2026
- HighRabbitMQ: Incomplete fix for CVE-2026-44838: does not escape , leaving room for an MQTT topic permission bypassCheck if you run itEPSS 0.23%Oct 1, 2026
- UnknownRejetto http_file_server Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 0.99%Oct 1, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationCheck if you run itEPSS 0.31%Sep 29, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.13%Sep 29, 2026
- High8.6A flaw was found in libsoup.Check if you run itEPSS 0.40%Sep 29, 2026
- Unknownurllib3 is an HTTP client library for Python.Check if you run itEPSS 0.29%Sep 29, 2026
- High7.1Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.14%Sep 27, 2026
- Low3.4The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them.Check if you run itEPSS 0.18%Sep 25, 2026
- Medium6.5The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger.Check if you run itEPSS 0.34%Sep 25, 2026