Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-107783 - Insertion of sensitive information into log file in AWS Tools for PowerShellCheck if you run itEPSS 0.10%Oct 9, 2026
- High8.5Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve…Check if you run itEPSS 0.08%Oct 9, 2026
- Medium6.3Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement…Check if you run itEPSS 0.21%Oct 9, 2026
- High7.1HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to th…Check if you run itEPSS 0.27%Oct 9, 2026
- Critical9.4Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.57%Oct 9, 2026
- High7.5Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.47%Oct 9, 2026
- Medium5.4A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon.Check if you run itEPSS 0.14%Oct 9, 2026
- High8.5Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipul…Check if you run itEPSS 0.09%Oct 9, 2026
- High8.8Improper input validation vulnerability in Apache Camel Karavan.Check if you run itEPSS 0.39%Oct 9, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.Check if you run itEPSS 0.52%Oct 9, 2026
- Medium5.3Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured…Check if you run itEPSS 0.19%Oct 9, 2026
- UnknownCVE-2026-53010 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.44%Oct 9, 2026
- UnknownCVE-2026-52993 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.40%Oct 9, 2026
- UnknownCVE-2026-52982 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.54%Oct 9, 2026
- UnknownCVE-2026-52958 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.73%Oct 9, 2026
- UnknownCVE-2026-52955 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.38%Oct 9, 2026
- UnknownCVE-2026-52931 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.50%Oct 9, 2026
- UnknownCVE-2026-52914 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.63%Oct 9, 2026
- High7.5In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS.Check if you run itEPSS 0.30%Oct 9, 2026
- Critical9.1Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCo…Check if you run itEPSS 0.22%Oct 9, 2026
- High7.5Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions.Check if you run itEPSS 0.45%Oct 9, 2026
- Medium6.1Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication.Check if you run itEPSS 0.36%Oct 9, 2026
- High7.5CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap.Check if you run itEPSS 0.37%Oct 9, 2026
- High8.1Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain mul…Check if you run itEPSS 0.40%Oct 9, 2026
- Critical9.1The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity.Check if you run itEPSS 0.36%Oct 9, 2026
Sort