Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Backstage: Improper access control in backend action invocationCheck if you run itEPSS 0.24%Oct 12, 2026
- High8.3Nginx UI OTP secure-session step-up is missing on sensitive mutation routesCheck if you run itEPSS 0.22%Oct 12, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextCheck if you run itEPSS 0.11%Oct 12, 2026
- Medium5.3copyparty FTP: upload outside defined volumes (limited path traversal)Check if you run itEPSS 0.31%Oct 12, 2026
- Medium5.9Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memorCheck if you run itEPSS 0.22%Oct 12, 2026
- Low2.1hex_core decompresses registry and Erlang term API responses without size limitsCheck if you run itEPSS 0.42%Oct 12, 2026
- LowImproper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine ruCheck if you run itEPSS 0.33%Oct 12, 2026
- High7.8A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path.Check if you run itEPSS 0.14%Oct 12, 2026
- Unknownhex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25Check if you run itEPSS 0.24%Oct 12, 2026
- UnknownInternal error terms inspected into AshTypescript RPC error responsesCheck if you run itEPSS 0.32%Oct 12, 2026
- UnknownMalicious code in pyyi (PyPI)Open the advisoryOct 12, 2026
- UnknownMalicious code in minecraftaccfinder (PyPI)Open the advisoryOct 12, 2026
- UnknownSecurity update for opensshOpen the advisoryOct 12, 2026
- UnknownSecurity update for python-oauthlibOpen the advisoryOct 12, 2026
- UnknownImportant: kernel security updateOpen the advisoryOct 12, 2026
- UnknownMalicious code in util-foriepft (npm)Open the advisoryOct 11, 2026
- UnknownMalicious code in @s4yhiitestpoc/scan-https-d (npm)Open the advisoryOct 11, 2026
- UnknownMalicious code in @s4yhiitestpoc/r3-https (npm)Open the advisoryOct 11, 2026
- High7.5Decompression bomb in : a tiny input can exhaust memory (OOM)Open the advisoryOct 11, 2026
- UnknownMalicious code in staking-apr-fetcher (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in seed-phrase-validator (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in evm-tx-decoder (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in tron-trc20-utils (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in hd-wallet-generator (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in wallet-balance-scanner (RubyGems)Open the advisoryOct 11, 2026