Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A flaw was found in rpcbind.Check if you run itEPSS 0.43%Sep 22, 2026
- Unknownmindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.26%Sep 22, 2026
- High7.5A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit breakers for microservices.Check if you run itEPSS 0.63%Sep 21, 2026
- Low2.1A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX.Check if you run itEPSS 0.45%Sep 21, 2026
- Critical9.1UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Pr…Check if you run itEPSS 0.34%Sep 21, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.42%Sep 21, 2026
- UnknownImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 1.16%Sep 21, 2026
- Critical9.3A flaw was found in the OpenShift console.Check if you run itEPSS 0.82%Sep 18, 2026
- Medium6.5A flaw was found in Netty's component.Check if you run itEPSS 1.35%Sep 18, 2026
- Medium6.5A flaw was found in Netty's HTTP/1 decoder.Check if you run itEPSS 0.41%Sep 18, 2026
- High8.7http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleCheck if you run itEPSS 0.57%Sep 18, 2026
- Medium6.5A flaw was found in Netty's HTTP/2 stack.Check if you run itEPSS 0.90%Sep 18, 2026
- Critical10.0IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an at…Check if you run itEPSS 0.18%Sep 18, 2026
- High7.5IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.46%Sep 18, 2026
- Medium6.5A flaw was found in Netty's HTTP/1.1 decoder.Check if you run itEPSS 0.90%Sep 18, 2026
- High8.2A flaw was found in Netty.Check if you run itEPSS 2.19%Sep 18, 2026
- High7.5A flaw was found in Netty.Check if you run itEPSS 0.95%Sep 18, 2026
- High7.5A flaw was found in Netty's HTTP/2 codec.Check if you run itEPSS 2.56%Sep 18, 2026
- Medium6.5A flaw was found in Netty.Check if you run itEPSS 0.48%Sep 18, 2026
- High7.5A flaw was found in Netty RtspDecoder.Check if you run itEPSS 0.77%Sep 18, 2026
- High7.5A flaw was found in Netty's WebSocketServerExtensionHandler.Check if you run itEPSS 1.08%Sep 18, 2026
- High7.5A flaw was found in Netty's HttpServerCodec.Check if you run itEPSS 0.73%Sep 18, 2026
- High7.5A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count.Check if you run itEPSS 0.85%Sep 18, 2026
- High7.4A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Ori…Check if you run itEPSS 0.24%Sep 18, 2026
- UnknownMalicious code in tailwindcss-form (npm)Open the advisorySep 18, 2026