Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMalicious code in @modss/baileys (npm)Open the advisorySep 3, 2026
- Medium4.1Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API.Check if you run itEPSS 0.36%Sep 3, 2026
- High8.8A flaw was found in the SFTP backend in gvfs.Check if you run itEPSS 0.36%Sep 1, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- UnknownTOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.54%Sep 1, 2026
- Unknownproxmox virtual_environment Missing Critical Step in AuthenticationPatch nowKEVEPSS 3.06%Sep 1, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.40%Aug 31, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.79%Aug 28, 2026
- High7.5Trilium is an open-source hierarchical note-taking application.Check if you run itEPSS 0.42%Aug 27, 2026
- High8.6Trilium is an open-source hierarchical note-taking application.Check if you run itEPSS 0.50%Aug 27, 2026
- High8.5OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it.Open the advisoryAug 26, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrb_msg_to_type6_ep11cprb_msgx() fun…Check if you run itEPSS 0.19%Aug 26, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers…Check if you run itEPSS 0.61%Aug 26, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.39%Aug 26, 2026
- High7.7A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends.Check if you run itEPSS 0.56%Aug 24, 2026
- High8.2RansomLook contains insufficient resource validation in the analysis PDF generation functionality.Check if you run itEPSS 0.41%Aug 24, 2026
- Medium6.9Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SC…Check if you run itEPSS 0.45%Aug 24, 2026
- Critical9.2RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to r…Check if you run itEPSS 0.69%Aug 24, 2026
- High8.8RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint.Check if you run itEPSS 0.69%Aug 24, 2026
- High8.8The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL…Check if you run itEPSS 0.49%Aug 24, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.Check if you run itEPSS 0.43%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.23%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026