Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked genera…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium5.1Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts via unescaped Operation Type and Locati…Check if you run itEPSS 0.23%Oct 15, 2026
- High7.4A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator.Check if you run itEPSS 0.33%Oct 15, 2026
- Medium6.3AliasVault is a privacy-first password manager with built-in email aliasing.Check if you run itEPSS 0.19%Oct 15, 2026
- UnknownCVE-2026-61702 affecting package cups 2.4.19-1Open the advisoryOct 15, 2026
- UnknownCVE-2026-55467 affecting package cups 2.4.19-1Open the advisoryOct 15, 2026
- Medium5.8The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses.Check if you run itEPSS 0.10%Oct 15, 2026
- High8.9Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.35%Oct 15, 2026
- Critical9.3Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOSCheck if you run itEPSS 1.28%Oct 15, 2026
- Medium5.7OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.16%Oct 15, 2026
- Low2.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.17%Oct 15, 2026
- High8.5A flaw was found in Ansible Operator Plugins.Check if you run itEPSS 0.39%Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.27%Oct 15, 2026
- High8.3: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.Check if you run itEPSS 0.27%Oct 15, 2026
- High8.7In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth.Check if you run itEPSS 0.52%Oct 15, 2026
- High8.2kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.37%Oct 15, 2026
- High8.1Important: kernel security updateOpen the advisoryOct 15, 2026
- Critical9.4An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64Check if you run itEPSS 0.23%Oct 15, 2026
- UnknownMemory safety bugs in kqueue copy-on-fork implementationCheck if you run itEPSS 0.14%Oct 15, 2026
- Medium6.4A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operationsCheck if you run itEPSS 0.14%Oct 15, 2026
- Critical9.8Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query build…Check if you run itEPSS 0.30%Oct 15, 2026
- Medium5.0Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project.Check if you run itEPSS 0.10%Oct 15, 2026
- High8.3Important: python36:3.6 security updateOpen the advisoryOct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- Mediumcontainerd: Unpack DoS via repeated opaque whiteoutsCheck if you run itEPSS 0.21%Oct 15, 2026