Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes.Check if you run itEPSS 0.41%Sep 3, 2026
- High8.8MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire IdentityCheck if you run itEPSS 0.51%Sep 3, 2026
- High8.7MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen.Check if you run itEPSS 3.37%Sep 3, 2026
- UnknownMalicious code in @modss/baileys (npm)Open the advisorySep 3, 2026
- Medium5.0Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Check if you run itEPSS 0.84%Sep 3, 2026
- Medium5.0Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.84%Sep 3, 2026
- Medium4.1Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API.Check if you run itEPSS 0.36%Sep 3, 2026
- High7.8Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent.Check if you run itEPSS 0.20%Sep 3, 2026
- Medium6.8Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability.Check if you run itEPSS 0.38%Sep 3, 2026
- Medium6.5Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API.Check if you run itEPSS 0.38%Sep 3, 2026
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 48.88%Sep 3, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.27%Sep 3, 2026
- UnknownOSGeo geonetwork Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Sep 3, 2026
- High7.9The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve().Check if you run itEPSS 0.19%Sep 2, 2026
- High8.6Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function.Check if you run itEPSS 0.39%Sep 2, 2026
- UnknownHeap-buffer-overflow in mp_load_floatOpen the advisorySep 2, 2026
- Medium6.5Hono: Incomplete fix for CVE-2026-39408: still writes files outside the output directoryOpen the advisorySep 1, 2026
- Medium5.3Hono: Unbounded dot-notation nesting in can cause memory exhaustionOpen the advisorySep 1, 2026
- Critical9.8ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 1, 2026
- High8.8A flaw was found in the SFTP backend in gvfs.Check if you run itEPSS 0.46%Sep 1, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- Unknownproxmox virtual_environment Missing Critical Step in AuthenticationPatch nowKEVEPSS 3.06%Sep 1, 2026
- High7.0A flaw was found in GDB's STABS debug format parser.Check if you run itEPSS 0.13%Aug 31, 2026
- High7.5A flaw was found in SmallRye GraphQL.Check if you run itEPSS 0.79%Aug 31, 2026
Sort