Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-45240Open the advisorySep 25, 2026
- UnknownCVE-2026-45239Open the advisorySep 25, 2026
- UnknownCVE-2026-45238Open the advisorySep 25, 2026
- UnknownCVE-2026-45237Open the advisorySep 25, 2026
- UnknownCVE-2026-45236Open the advisorySep 25, 2026
- UnknownCVE-2026-45235Open the advisorySep 25, 2026
- UnknownCVE-2026-45234Open the advisorySep 25, 2026
- UnknownCVE-2026-9313Open the advisorySep 25, 2026
- Medium4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name.Check if you run itEPSS 0.15%Sep 25, 2026
- Medium5.9When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirec…Check if you run itEPSS 0.29%Sep 25, 2026
- High7.5cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit.Check if you run itEPSS 0.38%Sep 25, 2026
- Low3.3phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check.Check if you run itEPSS 0.16%Sep 25, 2026
- UnknownCVE-2026-57864Open the advisorySep 25, 2026
- Low3.4The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them.Check if you run itEPSS 0.28%Sep 25, 2026
- Medium6.5The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger.Check if you run itEPSS 0.31%Sep 25, 2026
- UnknownCVE-2026-57861Open the advisorySep 25, 2026
- UnknownCVE-2026-53990Open the advisorySep 25, 2026
- High8.1Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.45%Sep 25, 2026
- UnknownThere exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltr…Check if you run itEPSS 0.29%Sep 25, 2026
- Low2.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.43%Sep 25, 2026
- Medium6.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.58%Sep 25, 2026
- Medium5.9RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.38%Sep 25, 2026
- Medium6.9RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.39%Sep 25, 2026
- Medium6.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.34%Sep 25, 2026
- High7.5RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpointCheck if you run itEPSS 0.45%Sep 25, 2026
Sort