Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Metasploit Wrap Up: Langflow, MongoDB, and MoreCheck this weekEPSS 15.29%Oct 7, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 3.75%Oct 7, 2026
- UnknownCritical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge PluginPatch nowKEVEPSS 3.29%Oct 7, 2026
- Low3.6In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.Check if you run itEPSS 0.08%Oct 7, 2026
- High7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.Check if you run itEPSS 0.15%Oct 7, 2026
- Low2.2In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.Check if you run itEPSS 0.14%Oct 7, 2026
- Medium4.2In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.Check if you run itEPSS 0.36%Oct 7, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1Patch nowKEVEPSS 0.98%Oct 7, 2026
- Medium4.9Backstage is an open framework for building developer portals.Check if you run itEPSS 0.27%Oct 6, 2026
- Medium6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.Check if you run itEPSS 0.19%Oct 6, 2026
- Medium4.9Backstage is an open framework for building developer portals.Check if you run itEPSS 0.31%Oct 6, 2026
- Medium4.1Backstage is an open framework for building developer portals.Check if you run itEPSS 0.28%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.21%Oct 6, 2026
- Medium6.4Backstage is an open framework for building developer portals.Check if you run itEPSS 0.27%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.37%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.29%Oct 6, 2026
- High8.1Backstage is an open framework for building developer portals.Check if you run itEPSS 0.28%Oct 6, 2026
- High7.8A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader.Check if you run itEPSS 0.15%Oct 6, 2026
- High7.8A flaw was found in Ghostscript.Check if you run itEPSS 0.18%Oct 6, 2026
- UnknownCVE-2026-106032 is listed by CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF.Check if you run itEPSS 0.23%Oct 6, 2026
- UnknownCVE-2026-105812 is listed by CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF.Check if you run itEPSS 0.28%Oct 6, 2026
- High7.5When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed approval.Check if you run itEPSS 0.21%Oct 6, 2026
- Medium5.4Gitea container registry stored XSS through blob media typeCheck if you run itEPSS 0.19%Oct 6, 2026
- Critical9.1Gitea built-in SSH server authentication bypass through key case foldingCheck if you run itEPSS 0.39%Oct 6, 2026
- Medium4.3Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the address that was validated…Check if you run itEPSS 0.18%Oct 6, 2026
Sort