Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A flaw was found in OpenSSH.Check if you run itEPSS 0.18%Oct 15, 2026
- Medium4.6Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmationCheck if you run itEPSS 0.13%Oct 15, 2026
- Medium5.4Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryCheck if you run itEPSS 0.18%Oct 15, 2026
- Medium4.7Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium4.7Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryCheck if you run itEPSS 0.13%Oct 15, 2026
- Medium6.5Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserCheck if you run itEPSS 0.17%Oct 15, 2026
- UnknownCVE-2026-98432 affecting package kernel 6.6.157.1-1Open the advisoryOct 15, 2026
- High8.4Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a…Check if you run itEPSS 0.16%Oct 15, 2026
- UnknownMalicious code in xapi-lib (npm)Open the advisoryOct 15, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 15, 2026
- High8.2Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature.Check if you run itEPSS 0.28%Oct 15, 2026
- High8.8Important: hplip security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- High7.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.34%Oct 15, 2026
- High7.8Important: kernel-rt security updateOpen the advisoryOct 15, 2026
- High7.3Moderate: environment-modules security updateOpen the advisoryOct 15, 2026
- High8.1Important: kernel security updateOpen the advisoryOct 15, 2026
- UnknownIn versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.27%Oct 15, 2026
- Criticalipv4: free inet_opt and ireq_opt after an RCU grace periodCheck if you run itEPSS 0.17%Oct 15, 2026
- UnknownMalicious code in idlive-face-capture-web-development (npm)Open the advisoryOct 15, 2026
- MediumAn attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is curren…Check if you run itEPSS 0.26%Oct 15, 2026
- HighThe storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states.Check if you run itEPSS 0.32%Oct 15, 2026
- Medium6.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.19%Oct 15, 2026
- UnknownMalicious code in proxy-rubikis (PyPI)Open the advisoryOct 15, 2026