Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-106584 is listed by USN-8928-1: OpenSSH vulnerabilities.Check if you run itEPSS 0.06%Oct 14, 2026
- UnknownCVE-2026-106582 is listed by USN-8928-1: OpenSSH vulnerabilities.Check if you run itEPSS 0.18%Oct 14, 2026
- UnknownCVE-2026-106555 is listed by USN-8928-1: OpenSSH vulnerabilities.Check if you run itEPSS 0.14%Oct 14, 2026
- HighBy permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer…Check if you run itEPSS 0.31%Oct 14, 2026
- HighWhen writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make write a record that exceeds its line-length parsing limit.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownWhen libcurl uses libssh2 with a hashed file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the callback.Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownA remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownA flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of follow…Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownWhen (or the command line tool's option) is set with one of the documented prefixes ( , , ), that binding is not part of the connection reuse key, so a later transfer…Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownWhen curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer.Check if you run itEPSS 0.26%Oct 14, 2026
- Medium5.4The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notific…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the o…Check if you run itEPSS 0.15%Oct 14, 2026
- Low3.3A flaw was found in BusyBox dpkg.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium5.3The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Comme…Check if you run itEPSS 0.14%Oct 14, 2026
- Medium4.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium6.4A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.Check if you run itEPSS 0.10%Oct 14, 2026
- Medium5.4Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts.Check if you run itEPSS 0.13%Oct 14, 2026
- High8.7Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism.Check if you run itEPSS 0.47%Oct 14, 2026
- High8.7A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources pr…Check if you run itEPSS 0.45%Oct 14, 2026
- UnknownCVE-2026-107913Open the advisoryOct 14, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite al…Check if you run itEPSS 0.28%Oct 14, 2026
- High8.8The insights-runtime-extractor runs as a privileged DaemonSet ( ) that scans container processes for runtime fingerprinting.Check if you run itEPSS 0.17%Oct 14, 2026
- High7.5Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allow…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.5The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is e…Check if you run itEPSS 0.14%Oct 14, 2026
- Medium5.3The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing una…Check if you run itEPSS 0.26%Oct 14, 2026
Sort