Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)Check if you run itEPSS 0.51%Sep 9, 2026
- Low1.1CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)Check if you run itEPSS 0.28%Sep 9, 2026
- Critical9.8A flaw was found in FreeIPA.Check if you run itEPSS 1.21%Sep 7, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.51%Sep 1, 2026
- Unknownpixelite events_manager Improper Privilege ManagementPatch nowKEVEPSS 0.50%Aug 31, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.40%Aug 31, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityPatch nowKEVEPSS 14.12%Aug 28, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.79%Aug 28, 2026
- UnknownImproper Verification of Cryptographic SignaturePatch nowKEVEPSS 0.43%Aug 27, 2026
- UnknownWeak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 8.96%Aug 25, 2026
- High8.6Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function.Check if you run itEPSS 1.78%Aug 24, 2026
- Critical9.3rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrato…Check if you run itEPSS 0.77%Aug 24, 2026
- High7.7A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends.Check if you run itEPSS 0.56%Aug 24, 2026
- Critical9.4RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint.Check if you run itEPSS 0.58%Aug 24, 2026
- High8.2RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts.Check if you run itEPSS 0.59%Aug 24, 2026
- High8.8RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint.Check if you run itEPSS 0.69%Aug 24, 2026
- High7.8A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5.Check if you run itEPSS 0.17%Aug 24, 2026
- High7.1Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the adm…Check if you run itEPSS 0.24%Aug 24, 2026
- Medium5.3The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned…Check if you run itEPSS 0.34%Aug 24, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.37%Aug 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length ncsi_send_cmd_nl() takes the number…Check if you run itEPSS 0.22%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ovl: don't warn when the mount is completed from another user namespace fsopen() records the caller…Check if you run itEPSS 0.17%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't warn when the mount is completed from another user namespace fsopen() records th…Check if you run itEPSS 0.17%Aug 22, 2026
- High8.2YOURLS is a self-hosted, customizable URL shortener written in PHP.Check if you run itEPSS 0.43%Aug 21, 2026
- Medium4.9Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.Check if you run itEPSS 0.59%Aug 21, 2026