Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresCheck if you run itEPSS 0.27%Oct 5, 2026
- Unknownuv: Path traversal on Windows through wheel extractionCheck if you run itEPSS 0.43%Oct 5, 2026
- High7.5vLLM is an inference and serving engine for large language models.Check if you run itEPSS 0.41%Oct 5, 2026
- Medium6.5Snowflake drivers writes sensitive information to logsCheck if you run itEPSS 0.09%Oct 5, 2026
- Low3.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.19%Oct 5, 2026
- Medium5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.42%Oct 5, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 99.48%Oct 5, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Fernandez Adsmonetizer adsensei-b30 allows Reflected XSS.Thi…Check if you run itEPSS 0.15%Oct 5, 2026
- Medium5.3Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values ar…Check if you run itEPSS 0.16%Oct 5, 2026
- Medium6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0Check if you run itEPSS 0.27%Oct 5, 2026
- Medium5.3Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0Check if you run itEPSS 0.09%Oct 5, 2026
- Medium6.9Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4Check if you run itEPSS 0.29%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0Check if you run itEPSS 0.10%Oct 5, 2026
- High8.7Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8Check if you run itEPSS 0.37%Oct 5, 2026
- Critical9.3Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16Check if you run itEPSS 0.47%Oct 5, 2026
- UnknownCVE-2026-105301Open the advisoryOct 5, 2026
- Medium6.7In venc, there is a possible out of bounds write due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to a missing bounds check.Check if you run itEPSS 0.11%Oct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- High8.8In vdec, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.39%Oct 5, 2026
- Medium6.7In vdec, there is a possible out of bounds write due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- UnknownD-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.06%Oct 5, 2026
- UnknownArbitrary process termination from exposed minifilter communication portCheck if you run itEPSS 0.14%Oct 5, 2026
- UnknownD-Link dap-1650_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.29%Oct 5, 2026
- Critical9.3Ahsay AhsayCBS Command Injection VulnerabilityPatch nowKEVEPSS 86.27%Oct 4, 2026
Sort