Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5music-metadata is a metadata parser for audio and video media files.Check if you run itEPSS 0.32%Oct 8, 2026
- Medium5.5music-metadata is a metadata parser for audio and video media files.Check if you run itEPSS 0.21%Oct 8, 2026
- UnknownCVE-2026-86144 is listed by USN-8910-1: libxml2 vulnerabilities.Check if you run itEPSS 0.19%Oct 8, 2026
- UnknownCVE-2026-86143 is listed by USN-8910-1: libxml2 vulnerabilities.Check if you run itEPSS 0.19%Oct 8, 2026
- UnknownCVE-2026-86142 is listed by USN-8910-1: libxml2 vulnerabilities.Check if you run itEPSS 0.16%Oct 8, 2026
- UnknownCVE-2026-86139 is listed by USN-8910-1: libxml2 vulnerabilities.Check if you run itEPSS 0.17%Oct 8, 2026
- UnknownCVE-2026-86138 is listed by USN-8910-1: libxml2 vulnerabilities.Check if you run itEPSS 0.13%Oct 8, 2026
- UnknownCVE-2026-76781 is listed by USN-8910-1: libxml2 vulnerabilities.Check if you run itEPSS 0.17%Oct 8, 2026
- MediumSymlink AttackCheck if you run itEPSS 0.14%Oct 8, 2026
- High7.4MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPESCheck if you run itEPSS 0.44%Oct 8, 2026
- High8.1MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)Check if you run itEPSS 0.45%Oct 8, 2026
- High7.5MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parametersCheck if you run itEPSS 0.39%Oct 8, 2026
- Medium5.9MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLSCheck if you run itEPSS 0.24%Oct 8, 2026
- HighCairoSVG: Quadratic-time DoS parsing a crafted SVGCheck if you run itEPSS 0.38%Oct 8, 2026
- High8.8dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set().Check if you run itEPSS 0.33%Oct 8, 2026
- High8.2Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate…Check if you run itEPSS 0.24%Oct 8, 2026
- Medium6.0In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further member…Check if you run itEPSS 0.26%Oct 8, 2026
- Medium5.9Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).Check if you run itEPSS 0.17%Oct 8, 2026
- Medium5.3FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redire…Check if you run itEPSS 0.26%Oct 8, 2026
- Medium5.3FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when openin…Check if you run itEPSS 0.32%Oct 8, 2026
- High7.1FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit.Check if you run itEPSS 0.36%Oct 8, 2026
- High7.1FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts…Check if you run itEPSS 0.47%Oct 8, 2026
- Medium6.9Coraza: URL-encoded form Content-Type parameters bypass Coraza body inspection in github.com/corazawaf/corazaCheck if you run itEPSS 0.28%Oct 8, 2026
- Medium4.0Coraza: Multipart filename* (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules in github.com/corazawaf/corazaCheck if you run itEPSS 0.25%Oct 8, 2026
- Medium5.8Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspectionCheck if you run itEPSS 0.20%Oct 8, 2026
Sort