Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCisco Application Policy Infrastructure Controller API Command Injection VulnerabilityCheck if you run itEPSS 0.43%Oct 7, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1Patch nowKEVEPSS 0.48%Oct 7, 2026
- Medium6.7Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addS…Check if you run itEPSS 0.17%Oct 6, 2026
- Unknownpppoatm: ensure a writable skb header and linear dataCheck if you run itEPSS 0.18%Oct 6, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.41%Oct 6, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresCheck if you run itEPSS 0.27%Oct 5, 2026
- Medium6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0Check if you run itEPSS 0.27%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0Check if you run itEPSS 0.10%Oct 5, 2026
- UnknownRejetto http_file_server Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 0.99%Oct 1, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 1.82%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityPatch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array reference when opening a tracer options file When a tracer option file is…Check if you run itEPSS 0.20%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid When the administrator mounts wit…Check if you run itEPSS 0.20%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentCheck if you run itEPSS 0.39%Sep 25, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.27%Sep 25, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.59%Sep 24, 2026
- Medium6.4A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend.Check if you run itEPSS 0.17%Sep 23, 2026
- High7.3RabbitMQ: Stored XSS via TLS peer-certificate DN in management UICheck if you run itEPSS 0.30%Sep 23, 2026
- High7.6RabbitMQ: CORS * reflects Origin with Allow-CredentialsCheck if you run itEPSS 0.41%Sep 23, 2026
- High8.6plex media_server External Control of File Name or PathPatch nowKEVSep 23, 2026
- Medium6.8The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing use…Check if you run itEPSS 0.29%Sep 23, 2026
- UnknownGitLab Critical Patch Release: 19.0.9, 18.11.12Check if you run itEPSS 0.57%Sep 23, 2026
- Medium5.3The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.23%Sep 22, 2026
- Medium5.3The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.23%Sep 22, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.43%Sep 22, 2026