Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.23%Sep 14, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch() sets rq_s…Check if you run itEPSS 0.16%Sep 11, 2026
- High7.5sunrpc: route to a populated pool in svc_pool_for_cpu()Check if you run itEPSS 0.71%Sep 11, 2026
- Medium5.5kernel: RDMA/rxe: Fix incomplete state save in rxe_requesterCheck if you run itEPSS 0.16%Sep 11, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- Unknownsensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 63.60%Sep 10, 2026
- UnknownCVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities routeCheck if you run itEPSS 0.72%Sep 9, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 2.91%Sep 9, 2026
- Medium5.1A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.Check if you run itEPSS 0.14%Sep 8, 2026
- Low2.7Null Pointer Dereference in Log ReportCheck if you run itEPSS 1.07%Sep 8, 2026
- Unknownmonstaftp monsta_ftp Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.51%Sep 7, 2026
- UnknownTOTOLINK lr1200gb_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.61%Sep 7, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 1.03%Sep 5, 2026
- UnknownMikroTik RouterOS Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 6.45%Sep 5, 2026
- UnknownD-Link dir-882_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.93%Sep 5, 2026
- Unknownipv6: seg6: clear IPv4 control block on IPIP decapsulationCheck if you run itEPSS 0.21%Sep 4, 2026
- Critical9.3MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables.Check if you run itEPSS 0.81%Sep 3, 2026
- UnknownMalicious code in @modss/baileys (npm)Open the advisorySep 3, 2026
- Medium4.1Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API.Check if you run itEPSS 0.36%Sep 3, 2026
- High8.8A flaw was found in the SFTP backend in gvfs.Check if you run itEPSS 0.36%Sep 1, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- UnknownTOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.54%Sep 1, 2026
- Unknownproxmox virtual_environment Missing Critical Step in AuthenticationPatch nowKEVEPSS 3.06%Sep 1, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.40%Aug 31, 2026