Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low0.9A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0.Check if you run itEPSS 0.11%Oct 16, 2026
- Low2.3metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass rol…Check if you run itEPSS 0.23%Oct 15, 2026
- Medium6.9RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks o…Check if you run itEPSS 0.32%Oct 15, 2026
- Medium5.3TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by su…Check if you run itEPSS 0.22%Oct 15, 2026
- Medium6.9ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an un…Check if you run itEPSS 0.32%Oct 15, 2026
- High7.1JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticat…Check if you run itEPSS 0.30%Oct 15, 2026
- Critical9.2OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query recor…Check if you run itEPSS 0.45%Oct 15, 2026
- Medium5.3ZoneMinder is a free, open source closed-circuit television software application.Check if you run itEPSS 0.39%Oct 15, 2026
- High8.6pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privil…Check if you run itEPSS 6.37%Oct 15, 2026
- Low2.3Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute comm…Check if you run itEPSS 2.68%Oct 15, 2026
- High7.7pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute c…Check if you run itEPSS 5.37%Oct 15, 2026
- High8.6Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commands as…Check if you run itEPSS 7.05%Oct 15, 2026
- High8.6Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as roo…Check if you run itEPSS 6.55%Oct 15, 2026
- Medium6.9libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c.Check if you run itEPSS 0.20%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Check if you run itEPSS 0.25%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows…Check if you run itEPSS 0.16%Oct 15, 2026
- High8.2Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.42%Oct 15, 2026
- Medium5.1Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package.Check if you run itEPSS 0.30%Oct 15, 2026
- Medium5.2OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.24%Oct 15, 2026
- UnknownIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-downl…Check if you run itEPSS 0.16%Oct 15, 2026
- UnknownMalicious code in xapi-lib (npm)Open the advisoryOct 15, 2026
- Critical9.3ipv4: validate checksum_start before completing checksumCheck this weekEPSS 21.00%Oct 15, 2026
- High7.3Moderate: environment-modules security updateOpen the advisoryOct 15, 2026
- UnknownMalicious code in idlive-face-capture-web-development (npm)Open the advisoryOct 15, 2026