Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8LMDeploy is a toolkit for compressing, deploying, and serving large language models.Check if you run itEPSS 1.27%Sep 18, 2026
- High8.7http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleCheck if you run itEPSS 0.57%Sep 18, 2026
- Medium6.5A flaw was found in Netty's HTTP/2 stack.Check if you run itEPSS 0.90%Sep 18, 2026
- High8.6Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages.Check if you run itEPSS 0.40%Sep 18, 2026
- Critical9.9XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).Check if you run itEPSS 1.50%Sep 18, 2026
- Medium5.9IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using…Check if you run itEPSS 0.20%Sep 18, 2026
- Medium5.4IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper validation of clie…Check if you run itEPSS 0.34%Sep 18, 2026
- Medium6.1IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting.Check if you run itEPSS 0.27%Sep 18, 2026
- Medium4.3IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in fur…Check if you run itEPSS 0.29%Sep 18, 2026
- Medium4.3IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.Check if you run itEPSS 0.36%Sep 18, 2026
- Medium5.9IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by ins…Check if you run itEPSS 0.21%Sep 18, 2026
- Medium6.5IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.Check if you run itEPSS 0.38%Sep 18, 2026
- Critical10.0IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an at…Check if you run itEPSS 0.25%Sep 18, 2026
- High8.8IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user…Check if you run itEPSS 0.66%Sep 18, 2026
- High7.5IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.62%Sep 18, 2026
- Medium6.5A flaw was found in Netty's HTTP/1.1 decoder.Check if you run itEPSS 0.90%Sep 18, 2026
- High8.2A flaw was found in Netty.Check if you run itEPSS 2.19%Sep 18, 2026
- High7.5A flaw was found in Netty.Check if you run itEPSS 0.95%Sep 18, 2026
- High7.5A flaw was found in Netty's HTTP/2 codec.Check if you run itEPSS 2.56%Sep 18, 2026
- Medium6.5A flaw was found in Netty.Check if you run itEPSS 0.48%Sep 18, 2026
- High7.5A flaw was found in Netty RtspDecoder.Check if you run itEPSS 0.77%Sep 18, 2026
- High7.5A flaw was found in Netty.Check if you run itEPSS 0.94%Sep 18, 2026
- High7.5A flaw was found in Netty's WebSocketServerExtensionHandler.Check if you run itEPSS 1.08%Sep 18, 2026
- Medium4.2A flaw was found in EAP's Elytron.Check if you run itEPSS 0.28%Sep 18, 2026
- Medium5.9A flaw was found in the DERDecoder class within wildfly-elytron-asn1.Check if you run itEPSS 0.71%Sep 18, 2026
Sort