Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5Contao: Cross-site request forgery in custom backend actionsCheck if you run itEPSS 0.11%Oct 9, 2026
- Medium5.3Contao: Path traversal in the images controllerCheck if you run itEPSS 0.31%Oct 9, 2026
- Critical9.3Contao: Cross-site scripting in the comments bundleCheck if you run itEPSS 0.27%Oct 9, 2026
- Medium4.3Contao: Improper access control in the preview links moduleCheck if you run itEPSS 0.19%Oct 9, 2026
- Medium4.3Contao: Improper access control in the table access voterCheck if you run itEPSS 0.19%Oct 9, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.34%Oct 9, 2026
- UnknownMalicious code in bungoma (npm)Open the advisoryOct 9, 2026
- UnknownCGA-wq8v-h3pg-39j3Open the advisoryOct 9, 2026
- UnknownMalicious code in pxnpm (npm)Open the advisoryOct 9, 2026
- UnknownCGA-wvw4-368f-rv3jOpen the advisoryOct 9, 2026
- UnknownCGA-xv6m-c5q8-vpxrOpen the advisoryOct 9, 2026
- UnknownCGA-xrqp-6m5w-w5qfOpen the advisoryOct 9, 2026
- UnknownCGA-xxr9-gwcj-vwg2Open the advisoryOct 9, 2026
- UnknownCGA-xvj9-x545-fxr5Open the advisoryOct 9, 2026
- Unknownzip: creates symbolic links whose attacker-controlled targets are outside the destination directoryOpen the advisoryOct 9, 2026
- High7.3Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege EscalationOpen the advisoryOct 9, 2026
- UnknownSecurity update for unboundOpen the advisoryOct 9, 2026
- UnknownSecurity update for python-PyJWTOpen the advisoryOct 9, 2026
- UnknownSecurity update for openssl-3Open the advisoryOct 9, 2026
- UnknownCGA-vjjv-f794-rwvfOpen the advisoryOct 9, 2026
- High8.2Uncontrolled RecursionCheck if you run itEPSS 0.39%Oct 9, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL program can invalidate its cached SRH withCheck if you run itEPSS 0.16%Oct 9, 2026
- UnknownSecurity update for wpa_supplicantOpen the advisoryOct 9, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 9, 2026
- Unknownbpf: Skip unsettled links in link iteratorCheck if you run itEPSS 0.16%Oct 9, 2026