Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.7AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random sourceCheck if you run itEPSS 0.26%Oct 8, 2026
- UnknownAsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukCheck if you run itEPSS 0.26%Oct 8, 2026
- CriticalAsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostCheck if you run itEPSS 0.19%Oct 8, 2026
- Medium6.3Parse Server 9.0.0 before 9.10.1 Class Name Disclosure via GraphQL ErrorsCheck if you run itEPSS 0.33%Oct 8, 2026
- UnknownMalicious code in kiyoramarkets (npm)Open the advisoryOct 8, 2026
- HighLangflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersCheck if you run itEPSS 0.25%Oct 7, 2026
- High8.5PraisonAI: Crawl4AI/Chromium backend is also affected by the SSRF validation bypassCheck if you run itEPSS 0.35%Oct 7, 2026
- UnknownMalicious code in @ikyyjee/ikkysingle (npm)Open the advisoryOct 7, 2026
- Unknownlibexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c.Check if you run itEPSS 0.55%Oct 7, 2026
- Critical9.8Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transportOpen the advisoryOct 7, 2026
- Medium5.4Gitea container registry stored XSS through blob media typeCheck if you run itEPSS 0.19%Oct 6, 2026
- Critical9.1Gitea built-in SSH server authentication bypass through key case foldingCheck if you run itEPSS 0.27%Oct 6, 2026
- High8.6Payload: SQL injection in SQLite/PostgresCheck if you run itEPSS 0.29%Oct 6, 2026
- UnknownA security flaw has been discovered in vllm-project vLLM up to 0.31.0.Open the advisoryOct 6, 2026
- UnknownCGA-vp7j-h68x-gjjpOpen the advisoryOct 6, 2026
- High7.5CGA-xf2g-g86j-hw7cOpen the advisoryOct 6, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)Open the advisoryOct 6, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)Open the advisoryOct 6, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 6, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrm_state_netlink() builds the ALLOCSPI response with dump_oneCheck if you run itEPSS 0.17%Oct 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept We need to clear cep before releaseCheck if you run itEPSS 0.13%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS scpi_dvfs_get_info() already rejected a zero opp_cCheck if you run itEPSS 0.17%Oct 6, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intentionally returns a referCheck if you run itEPSS 0.12%Oct 6, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association responses libipw_handle_assoc_resp() reads the capability, status andCheck if you run itEPSS 0.26%Oct 6, 2026