Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configuratiCheck if you run itEPSS 0.09%Oct 12, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.05%Oct 12, 2026
- Medium5.5A security vulnerability has been detected in bleenco abstruse up to 2.1.0.Check if you run itEPSS 0.70%Oct 11, 2026
- UnknownCVE-2026-104703Open the advisoryOct 11, 2026
- Low2.1A security flaw has been discovered in zhayujie CowAgent up to 2.2.0.Check if you run itEPSS 0.28%Oct 11, 2026
- High7.8GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs.Check if you run itEPSS 0.65%Oct 11, 2026
- High7.8The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData().Check if you run itEPSS 0.11%Oct 11, 2026
- High7.8The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c declared two variab…Check if you run itEPSS 0.12%Oct 11, 2026
- High7.1net_route_ipv6_packet() in subsys/net/ip/route_ipv6.c resolved the nexthop's link-layer address with net_nbr_get_lladdr(nbr->idx) without first checking whether the ne…Check if you run itEPSS 0.22%Oct 11, 2026
- Medium6.8The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK…Check if you run itEPSS 0.17%Oct 11, 2026
- Low3.4The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion.Check if you run itEPSS 0.11%Oct 11, 2026
- High7.1omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may includ…Check if you run itEPSS 0.37%Oct 11, 2026
- Medium5.3Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs.Check if you run itEPSS 0.28%Oct 11, 2026
- High7.2pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members t…Check if you run itEPSS 0.38%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any authenticated user to rea…Check if you run itEPSS 0.19%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated users to del…Check if you run itEPSS 0.21%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any authenticated user to delete…Check if you run itEPSS 0.21%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint that allows any authenticated user to modify lo…Check if you run itEPSS 0.19%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows authenticated users to read other users' AI ch…Check if you run itEPSS 0.19%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler that allows any authenticated user to modify us…Check if you run itEPSS 0.19%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or remove department heads by calling PUT /sys/user…Check if you run itEPSS 0.19%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler that allows low-privileged authenticated users to…Check if you run itEPSS 0.17%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send system announcements by calling POST /sys…Check if you run itEPSS 0.21%Oct 11, 2026
- Medium5.3A vulnerability was detected in erzhongxmu Jeewms up to 3.7.Check if you run itEPSS 0.26%Oct 11, 2026
- Low2.1A weakness has been identified in zhayujie CowAgent up to 2.1.6.Check if you run itEPSS 0.24%Oct 11, 2026
Sort