Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent.Check if you run itEPSS 0.26%Oct 14, 2026
- High8.8Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unCheck if you run itEPSS 0.48%Oct 14, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.Check if you run itEPSS 0.44%Oct 14, 2026
- Critical9.2NGINX map directive and regex matching vulnerabilityCheck if you run itEPSS 0.55%Oct 14, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.Check if you run itEPSS 0.46%Oct 14, 2026
- Critical9.8Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai…Check if you run itEPSS 1.31%Oct 13, 2026
- Low2.1A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8.Check if you run itEPSS 0.27%Oct 13, 2026
- UnknownMalicious code in monkey-tags-ip (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @user-interface-common/common-styles (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/workspaces-components (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui-components (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui (npm)Open the advisoryOct 13, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.18%Oct 12, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.43%Oct 12, 2026
- High8.3Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker contextCheck if you run itEPSS 0.28%Oct 12, 2026
- Medium6.3Nginx UI: Auto backup name allows path traversal outside validated storage pathCheck if you run itEPSS 0.17%Oct 12, 2026
- High8.3Nginx UI OTP secure-session step-up is missing on sensitive mutation routesCheck if you run itEPSS 0.22%Oct 12, 2026
- High8.7Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only at document root.Open the advisoryOct 12, 2026
- Low3.6ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the sa…Check if you run itEPSS 0.12%Oct 12, 2026
- High7.8The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData().Check if you run itEPSS 0.11%Oct 11, 2026
- Medium5.3Contao: Path traversal in the images controllerCheck if you run itEPSS 0.31%Oct 9, 2026
- Medium4.2Authentication Bypass Using an Alternate Path or Channel in MalcolmCheck if you run itEPSS 0.23%Oct 8, 2026
- UnknownCisco NX-OS Software NX-API Remote Code Execution VulnerabilityCheck if you run itEPSS 0.52%Oct 8, 2026
- Medium6.5NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation.Check if you run itEPSS 1.19%Oct 8, 2026
- UnknownCisco NX-OS Software Control Plane Denial of Service VulnerabilityCheck if you run itEPSS 0.37%Oct 7, 2026