Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-63724Open the advisoryOct 1, 2026
- UnknownCVE-2026-63721Open the advisoryOct 1, 2026
- High7.5Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies.Check if you run itEPSS 0.57%Oct 1, 2026
- Medium4.3HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the a…Check if you run itEPSS 0.16%Oct 1, 2026
- Critical9.9Foreman: safemode bypass leading to rceCheck if you run itEPSS 0.72%Oct 1, 2026
- Medium6.1A flaw was found in oauth-proxy.Check if you run itEPSS 0.28%Oct 1, 2026
- Critical9.3The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation.Check if you run itEPSS 0.59%Oct 1, 2026
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityPatch nowKEVEPSS 4.57%Oct 1, 2026
- Medium6.1An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size.Check if you run itEPSS 0.28%Sep 30, 2026
- Low2.1[SECURITY] [DSA 6550-1] ghostscript security updateCheck if you run itEPSS 0.32%Sep 30, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.Check if you run itEPSS 0.25%Sep 30, 2026
- High7.1Crocoblock jetengine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Sep 30, 2026
- Medium6.4The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_price_text' parameter…Check if you run itEPSS 0.19%Sep 30, 2026
- Medium6.4The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to…Check if you run itEPSS 0.16%Sep 30, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 38.93%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityPatch nowKEVEPSS 0.86%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Session Fixation VulnerabilityPatch nowKEVEPSS 1.96%Sep 30, 2026
- UnknownCVE-2026-15278Open the advisorySep 29, 2026
- High8.7anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking.Check if you run itEPSS 0.59%Sep 29, 2026
- UnknownCVE-2026-11415Open the advisorySep 29, 2026
- Medium5.9The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition.Check if you run itEPSS 0.32%Sep 29, 2026
- High8.2A flaw was found in libsoup.Check if you run itEPSS 0.37%Sep 29, 2026
- Critical9.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.48%Sep 29, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.24%Sep 29, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.13%Sep 29, 2026
Sort