Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Uncontrolled RecursionCheck if you run itEPSS 0.50%Oct 9, 2026
- Unknownxen/netfront: drop RX packets with a short Ethernet headerCheck if you run itEPSS 0.19%Oct 9, 2026
- Medium6.9An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting.Check if you run itEPSS 0.25%Oct 9, 2026
- Medium6.0An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's…Check if you run itEPSS 0.23%Oct 9, 2026
- Low2.3An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the r…Check if you run itEPSS 0.14%Oct 9, 2026
- Critical9.2An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to e…Check if you run itEPSS 0.48%Oct 9, 2026
- High8.8A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows…Check if you run itEPSS 0.44%Oct 9, 2026
- Critical9.3A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a de…Check if you run itEPSS 0.60%Oct 9, 2026
- High8.8A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker wh…Check if you run itEPSS 0.43%Oct 9, 2026
- Medium5.5OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.Check if you run itEPSS 0.15%Oct 9, 2026
- Medium5.5OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has bee…Check if you run itEPSS 0.13%Oct 9, 2026
- Medium6.5OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management.Check if you run itEPSS 0.24%Oct 9, 2026
- Medium5.5OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().Check if you run itEPSS 0.15%Oct 9, 2026
- Critical10.0Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.67%Oct 8, 2026
- Critical9.8Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.23%Oct 8, 2026
- Medium6.5Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.53%Oct 8, 2026
- High8.1Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.56%Oct 8, 2026
- High8.7TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predict…Check if you run itEPSS 0.27%Oct 8, 2026
- High8.7TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443.Check if you run itEPSS 0.34%Oct 8, 2026
- UnknownCVE-2026-100197Open the advisoryOct 8, 2026
- High7.5HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently.Check if you run itEPSS 0.49%Oct 8, 2026
- Medium6.1A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped.Check if you run itEPSS 0.29%Oct 8, 2026
- Medium6.1When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.Check if you run itEPSS 0.29%Oct 8, 2026
- High7.8Checksum database bypass for golang.org/toolchain in cmd/goCheck if you run itEPSS 0.10%Oct 8, 2026
- High7.8Checksum bypass for golang.org/fips140 in cmd/goCheck if you run itEPSS 0.10%Oct 8, 2026
Sort