Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Backstage is an open framework for building developer portals.Check if you run itEPSS 0.27%Oct 6, 2026
- Medium6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.Check if you run itEPSS 0.19%Oct 6, 2026
- Medium4.9Backstage is an open framework for building developer portals.Check if you run itEPSS 0.31%Oct 6, 2026
- Medium4.1Backstage is an open framework for building developer portals.Check if you run itEPSS 0.28%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.21%Oct 6, 2026
- Medium6.4Backstage is an open framework for building developer portals.Check if you run itEPSS 0.27%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.37%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.29%Oct 6, 2026
- High8.1Backstage is an open framework for building developer portals.Check if you run itEPSS 0.28%Oct 6, 2026
- High7.8A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader.Check if you run itEPSS 0.15%Oct 6, 2026
- High7.8A flaw was found in Ghostscript.Check if you run itEPSS 0.18%Oct 6, 2026
- High7.5When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed approval.Check if you run itEPSS 0.21%Oct 6, 2026
- Medium5.4Gitea container registry stored XSS through blob media typeCheck if you run itEPSS 0.19%Oct 6, 2026
- Critical9.1Gitea built-in SSH server authentication bypass through key case foldingCheck if you run itEPSS 0.39%Oct 6, 2026
- Medium4.3Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the address that was validated…Check if you run itEPSS 0.18%Oct 6, 2026
- High7.7When was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions.Check if you run itEPSS 0.23%Oct 6, 2026
- High8.2Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.Check if you run itEPSS 0.13%Oct 6, 2026
- High8.2Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.14%Oct 6, 2026
- Medium5.4Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin…Check if you run itEPSS 0.18%Oct 6, 2026
- Medium4.7Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory o…Check if you run itEPSS 0.22%Oct 6, 2026
- Medium4.2Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation…Check if you run itEPSS 0.16%Oct 6, 2026
- Medium5.4UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page.Check if you run itEPSS 0.20%Oct 6, 2026
- High8.4Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arb…Check if you run itEPSS 0.09%Oct 6, 2026
- Medium5.4Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page.Check if you run itEPSS 0.22%Oct 6, 2026
- Medium6.5Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page.Check if you run itEPSS 0.25%Oct 6, 2026
Sort