Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus root.Check if you run itEPSS 0.20%Aug 22, 2026
- Medium6.9hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c.Check if you run itEPSS 0.21%Aug 22, 2026
- Medium6.9hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length.Check if you run itEPSS 0.17%Aug 22, 2026
- High8.5hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path.Check if you run itEPSS 0.24%Aug 22, 2026
- High8.7NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying…Check if you run itEPSS 0.52%Aug 22, 2026
- High7.1NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, making th…Check if you run itEPSS 0.41%Aug 22, 2026
- High8.7NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly inst…Check if you run itEPSS 0.65%Aug 22, 2026
- Medium6.9NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py.Check if you run itEPSS 0.33%Aug 22, 2026
- High8.7NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions.Check if you run itEPSS 0.51%Aug 22, 2026
- High8.2NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the co…Check if you run itEPSS 0.42%Aug 22, 2026
- High8.7NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root.Check if you run itEPSS 0.65%Aug 22, 2026
- Medium6.8nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely.Check if you run itEPSS 0.18%Aug 22, 2026
- Critical9.1Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret.Check if you run itEPSS 0.50%Aug 22, 2026
- Critical9.1Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them.Check if you run itEPSS 0.50%Aug 22, 2026
- Low2.0NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader.Check if you run itEPSS 0.17%Aug 22, 2026
- High8.7NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing…Check if you run itEPSS 1.10%Aug 22, 2026
- Medium6.3Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerab…Check if you run itEPSS 0.25%Aug 22, 2026
- High8.7Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.O…Check if you run itEPSS 0.15%Aug 22, 2026
- High7.5Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys.Check if you run itEPSS 0.61%Aug 22, 2026
- UnknownCVE-2026-9052Open the advisoryAug 21, 2026
- UnknownCVE-2026-76069Open the advisoryAug 21, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.38%Aug 21, 2026
- High7.4WeeChat (Wee Enhanced Environment for Chat) is a free chat client.Check if you run itEPSS 0.43%Aug 21, 2026
- Medium6.5WeeChat (Wee Enhanced Environment for Chat) is a free chat client.Check if you run itEPSS 0.48%Aug 21, 2026
- Medium4.6Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites.Check if you run itEPSS 0.24%Aug 21, 2026
Sort