Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path.Check if you run itEPSS 0.14%Oct 12, 2026
- Medium5.4Thelia 2.6.1 contains an absolute path traversal vulnerability in its Smarty template handling that enables SSTI and remote code execution.Check if you run itEPSS 0.58%Oct 12, 2026
- High8.8Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote code execution.Check if you run itEPSS 1.05%Oct 12, 2026
- Medium5.4Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code.Check if you run itEPSS 0.23%Oct 12, 2026
- Medium5.4Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions.Check if you run itEPSS 0.39%Oct 12, 2026
- Critical9.2SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMCheck if you run itEPSS 0.21%Oct 12, 2026
- Critical9.1Thirty bees through 1.7.0 Account Takeover via PasswordController Guest CheckoutCheck if you run itEPSS 0.34%Oct 12, 2026
- UnknownCVE-2026-68764Open the advisoryOct 12, 2026
- High7.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Information Tech…Check if you run itEPSS 0.49%Oct 12, 2026
- High8.8Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Mini…Check if you run itEPSS 0.25%Oct 12, 2026
- High8.7SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, max_fram…Check if you run itEPSS 0.49%Oct 12, 2026
- High8.7SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before appl…Check if you run itEPSS 0.42%Oct 12, 2026
- High8.7LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk…Check if you run itEPSS 0.42%Oct 12, 2026
- Medium5.3LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to th…Check if you run itEPSS 0.20%Oct 12, 2026
- Medium5.3LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs…Check if you run itEPSS 0.18%Oct 12, 2026
- High8.7LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity template…Check if you run itEPSS 0.39%Oct 12, 2026
- High8.6A security flaw has been discovered in Linksys E1700 1.0.0.4.003.Check if you run itEPSS 2.16%Oct 12, 2026
- Critical9.3A vulnerability was determined in Linksys E1700 1.0.0.4.003.Check if you run itEPSS 0.62%Oct 12, 2026
- High7.4In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without e…Check if you run itEPSS 0.17%Oct 12, 2026
- Medium4.0In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior tog…Check if you run itEPSS 0.07%Oct 12, 2026
- Medium6.5In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting…Check if you run itEPSS 0.24%Oct 12, 2026
- High8.8A deserialization of untrusted data vulnerability was found in ManageIQ.Check if you run itEPSS 0.45%Oct 12, 2026
- High7.1jshERP through 3.6 contains an information disclosure vulnerability that allows any authenticated user to read platform-wide configuration secrets via the getInfoByKey…Check if you run itEPSS 0.25%Oct 12, 2026
- High8.7jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields includin…Check if you run itEPSS 0.36%Oct 12, 2026
- Medium5.3jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restriction…Check if you run itEPSS 0.21%Oct 12, 2026
Sort