Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Check if you run itEPSS 0.25%Oct 24, 2026
- UnknownResearch mention from Openwall OSS Security.Open the advisoryOct 23, 2026
- UnknownCVE Record: CVE-2015-7759Check if you run itEPSS 1.52%Oct 23, 2026
- UnknownCVE Record: CVE-2004-0790Check this weekEPSS 80.10%Oct 23, 2026
- Critical9.5EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access.Check if you run itEPSS 0.64%Oct 22, 2026
- High7.4A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with nonCheck if you run itEPSS 0.30%Oct 22, 2026
- High7.4A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse().Check if you run itEPSS 0.47%Oct 22, 2026
- Critical9.8Out-of-Bounds Write in Google Brotli DecoderPatch nowKEVEPSS 82.64%Oct 22, 2026
- High7.4A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a nCheck if you run itEPSS 0.30%Oct 22, 2026
- UnknownMIPC Camera Firmware Vulnerability | CVE-2024-39091Check if you run itEPSS 1.71%Oct 22, 2026
- UnknownCVE-2023-36003 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsanfälligkeit im XAML-Diagnose bezüglich RechteerweiterungenCheck if you run itEPSS 2.85%Oct 22, 2026
- Critical9.4Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.03%Oct 22, 2026
- Critical9.9As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review.Check if you run itEPSS 0.33%Oct 21, 2026
- Critical9.2Laravel is a web application framework.Patch nowKEVEPSS 0.78%Oct 21, 2026
- Critical9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Check if you run itEPSS 0.38%Oct 21, 2026
- Critical9.8Pillow is a Python imaging library.Check if you run itEPSS 0.66%Oct 21, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Critical9.8Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Patch nowKEVEPSS 0.61%Oct 20, 2026
- Medium6.8The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.Check if you run itEPSS 0.11%Oct 20, 2026
- Medium6.8The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a…Check if you run itEPSS 0.12%Oct 20, 2026
- Medium6.8PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy.Check if you run itEPSS 0.11%Oct 20, 2026
- Medium6.9The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fi…Check if you run itEPSS 0.13%Oct 20, 2026
- Medium6.8The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.Check if you run itEPSS 0.12%Oct 20, 2026
- UnknownCVE Record: CVE-2026-80466Open the advisoryOct 20, 2026
Sort