Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3A flaw was found in environment-modules.Check if you run itEPSS 0.23%Sep 15, 2026
- Low3.7The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received dur…Check if you run itEPSS 0.27%Sep 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 0.23%Sep 15, 2026
- High8.8Google Pixel Improper Authorization VulnerabilityPatch nowKEVEPSS 0.63%Sep 15, 2026
- High7.8A use after free issue was addressed with improved memory management.Check if you run itEPSS 0.17%Sep 14, 2026
- High8.6CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity CenterCheck if you run itEPSS 0.69%Sep 14, 2026
- Medium5.5A flaw was found in SSSD (System Security Services Daemon).Check if you run itEPSS 0.14%Sep 14, 2026
- Medium6.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.17%Sep 14, 2026
- Medium4.3Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-actio…Check if you run itEPSS 0.37%Sep 14, 2026
- Low3.7Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by…Check if you run itEPSS 0.43%Sep 14, 2026
- Medium4.3N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresse…Check if you run itEPSS 0.34%Sep 14, 2026
- Low2.5libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_wri…Check if you run itEPSS 0.16%Sep 14, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScr…Check if you run itEPSS 0.27%Sep 14, 2026
- Critical9.8Cisco Secure Email Gateway SQL Injection VulnerabilityPatch nowKEVEPSS 29.54%Sep 14, 2026
- High7.1FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c.Check if you run itEPSS 0.12%Sep 13, 2026
- High7.1FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.Check if you run itEPSS 0.16%Sep 13, 2026
- Low3.5Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder.Check if you run itEPSS 0.27%Sep 13, 2026
- Medium6.3Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw i…Check if you run itEPSS 0.14%Sep 13, 2026
- Low1.8Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor.Check if you run itEPSS 0.12%Sep 13, 2026
- Low3.0Floodlight 71fe8a7 allows disruption of host communication via link spoofing.Check if you run itEPSS 0.18%Sep 13, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writeback_store() Patch series "zram: fix stale scan bounds after…Check if you run itEPSS 0.17%Sep 11, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispatch nlmsvc_ops is published by nfsd_lockd_init() and clear…Check if you run itEPSS 0.55%Sep 11, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch() sets rq_s…Check if you run itEPSS 0.16%Sep 11, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates mdsc->sess…Check if you run itEPSS 0.67%Sep 11, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: cifs: call pagecache_isize_extended() in cifs_setsize() when extending cifs_setsize() calls truncat…Check if you run itEPSS 0.21%Sep 11, 2026
Sort