Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Check Point Multiple Products Improper Certificate Validation VulnerabilityPatch nowKEVEPSS 54.23%Sep 9, 2026
- High8.8ZDI-26-623: Linux Kernel IPv6 Multicast Routing Use-After-Free Local Privilege Escalation VulnerabilityOpen the advisorySep 9, 2026
- Medium6.1ZDI-26-643: Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure VulnerabilityCheck if you run itEPSS 0.14%Sep 9, 2026
- High7.5ZDI-26-642: Oracle VirtualBox IDisplay Out-Of-Bounds Read Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.15%Sep 9, 2026
- High7.5ZDI-26-644: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.15%Sep 9, 2026
- High7.5ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.26%Sep 9, 2026
- Medium6.1ZDI-26-628: Backblaze Personal Computer Backup bzreports Link Following Denial-of-Service VulnerabilityCheck if you run itEPSS 0.33%Sep 9, 2026
- UnknownCVE-2026-53939 affecting package cjose 0.6.2.2-7Open the advisorySep 9, 2026
- UnknownInitialization of a Resource with an Insecure DefaultPatch nowKEVEPSS 1.08%Sep 9, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 2.91%Sep 9, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.24%Sep 9, 2026
- Highsharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545Check if you run itEPSS 0.19%Sep 8, 2026
- High8.8Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.80%Sep 8, 2026
- High7.5Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionCheck if you run itEPSS 1.90%Sep 8, 2026
- High8.5A flaw was found in libxml2 with Python bindings enabled.Check if you run itEPSS 0.45%Sep 8, 2026
- Medium5.1A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.Check if you run itEPSS 0.14%Sep 8, 2026
- High7.5Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0Check if you run itEPSS 0.17%Sep 8, 2026
- High7.4An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.Check if you run itEPSS 0.41%Sep 8, 2026
- Medium5.1A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter.Check if you run itEPSS 0.26%Sep 8, 2026
- High7.2A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component.Check if you run itEPSS 0.68%Sep 8, 2026
- High8.8Google Chromium V8 Out of Bounds Write VulnerabilityPatch nowKEVEPSS 3.14%Sep 8, 2026
- High7.8Microsoft Windows Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.62%Sep 8, 2026
- Critical9.9ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityPatch nowKEVEPSS 0.92%Sep 8, 2026
- UnknownWorkflow session email approval process bypassCheck if you run itEPSS 0.24%Sep 8, 2026
- High8.1Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceCheck if you run itEPSS 0.89%Sep 7, 2026