Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd_net boolean flags to unsigned long flags word nfsd_net contains several boolean…Check if you run itEPSS 0.42%Sep 24, 2026
- Medium4.3HCL Sametime is vulnerable to insufficient input sanitization.Check if you run itEPSS 0.21%Sep 24, 2026
- High8.1A path traversal vulnerability was found in pulpcore.Check if you run itEPSS 0.41%Sep 24, 2026
- MediumRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 24, 2026
- Medium6.8An authorization bypass was found in the Ansible Automation Platform (AAP) gateway.Check if you run itEPSS 0.54%Sep 24, 2026
- Critical9.8Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass.Check if you run itEPSS 0.40%Sep 24, 2026
- High8.8SQL Injection vulnerability in DIAEnergie.Check if you run itEPSS 0.26%Sep 24, 2026
- Medium4.9ShortPixel image_optimizer Deserialization of Untrusted DataPatch nowKEVEPSS 0.21%Sep 24, 2026
- High7.5A flaw was found in the OpenShift console.Check if you run itEPSS 0.53%Sep 23, 2026
- UnknownCVE-2026-57854Open the advisorySep 23, 2026
- UnknownCVE-2026-53979Open the advisorySep 23, 2026
- UnknownCVE-2026-53978Open the advisorySep 23, 2026
- UnknownCVE-2026-53969Open the advisorySep 23, 2026
- High7.2A flaw was found in the Ansible Automation Platform automation controller.Check if you run itEPSS 0.80%Sep 23, 2026
- Medium6.4A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend.Check if you run itEPSS 0.29%Sep 23, 2026
- Medium6.5A flaw was found in the automation-controller notification subsystem.Check if you run itEPSS 0.44%Sep 23, 2026
- High7.5A denial-of-service flaw was found in gnome-remote-desktop.Check if you run itEPSS 0.91%Sep 23, 2026
- High8.5CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() performs no object-level RBAC.Check if you run itEPSS 0.41%Sep 23, 2026
- Medium4.3HostList.list() catches bare Exception and returns str(e) verbatim.Check if you run itEPSS 0.36%Sep 23, 2026
- Critical9.8SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requestsCheck if you run itEPSS 0.74%Sep 23, 2026
- Low2.7IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser.Check if you run itEPSS 0.32%Sep 23, 2026
- High8.6plex media_server External Control of File Name or PathPatch nowKEVEPSS 1.79%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.64%Sep 23, 2026
- Medium6.9plex media_server Improper Neutralization of Encoded URI Schemes in a Web PagePatch nowKEVEPSS 1.95%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.82%Sep 23, 2026
Sort