Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3.Check if you run itEPSS 0.22%Oct 12, 2026
- High8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code i…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code i…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.8An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.Check if you run itEPSS 1.80%Oct 12, 2026
- High7.5Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc DigiDoc iOS.Check if you run itEPSS 0.15%Oct 12, 2026
- UnknownInternal error terms inspected into AshTypescript RPC error responsesCheck if you run itEPSS 0.41%Oct 12, 2026
- Medium6.9A vulnerability was detected in Kamailio up to 6.0.7/6.1.3.Check if you run itEPSS 0.47%Oct 12, 2026
- Low2.1A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1.Check if you run itEPSS 0.27%Oct 12, 2026
- UnknownMalicious code in pyyi (PyPI)Open the advisoryOct 12, 2026
- UnknownMalicious code in minecraftaccfinder (PyPI)Open the advisoryOct 12, 2026
- High7.5A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode.Check if you run itEPSS 0.13%Oct 12, 2026
- Medium5.5A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6.Check if you run itEPSS 0.42%Oct 12, 2026
- Low2.1A vulnerability was found in agno-agi agno up to 3.0.6.Check if you run itEPSS 0.24%Oct 12, 2026
- Low2.1A flaw has been found in SEMCMS up to 5.0.Check if you run itEPSS 0.19%Oct 12, 2026
- Medium5.5A security vulnerability has been detected in SEMCMS up to 5.0.Check if you run itEPSS 0.31%Oct 12, 2026
- Medium5.5A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2.Check if you run itEPSS 0.32%Oct 12, 2026
- UnknownSecurity update for opensshOpen the advisoryOct 12, 2026
- UnknownSecurity update for python-oauthlibOpen the advisoryOct 12, 2026
- Critical9.1Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed.Check if you run itEPSS 0.30%Oct 12, 2026
- Medium5.3The OTRS Agent Frontend configuration endpoint can be accessed without authentication.Check if you run itEPSS 0.28%Oct 12, 2026
- High8.7A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory.Check if you run itEPSS 0.72%Oct 12, 2026
- Medium4.8An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the brows…Check if you run itEPSS 0.14%Oct 12, 2026
- Medium5.4An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack.Check if you run itEPSS 0.12%Oct 12, 2026
- Medium6.8A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak.Check if you run itEPSS 0.25%Oct 12, 2026
- Low1.2A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0.Check if you run itEPSS 0.18%Oct 12, 2026
Sort