Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-20267 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.38%Oct 2, 2026
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 2.75%Oct 2, 2026
- High8.8Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree PathsCheck if you run itEPSS 0.67%Oct 2, 2026
- High7.1Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object ResolutionCheck if you run itEPSS 0.31%Oct 2, 2026
- High8.6Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protectionsCheck if you run itEPSS 0.15%Oct 2, 2026
- High8.6Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistenceCheck if you run itEPSS 0.19%Oct 2, 2026
- High8.6Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symlinksCheck if you run itEPSS 0.15%Oct 2, 2026
- UnknownCVE-2026-64818Open the advisoryOct 2, 2026
- UnknownCVE-2026-103505 - Mount Option Injection in Amazon EFS CSI DriverCheck if you run itEPSS 0.43%Oct 2, 2026
- High8.7An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus sessi…Check if you run itEPSS 0.50%Oct 2, 2026
- Medium6.2Guest can panic host through filesystem timestamp before the epoch on wasip3Check if you run itEPSS 0.11%Oct 2, 2026
- Medium4.0WASI preview 0 implementation of circumvents fuel consumptionCheck if you run itEPSS 0.12%Oct 2, 2026
- Medium5.7Rooting for GC values live across may be missing, causing GC heap corruptionCheck if you run itEPSS 0.28%Oct 2, 2026
- High8.7In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with the top b…Check if you run itEPSS 0.42%Oct 2, 2026
- Medium6.5StellarWP the_events_calendar Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.22%Oct 2, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.49%Oct 2, 2026
- UnknownGitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1Check this weekEPSS 17.49%Oct 2, 2026
- Unknowngeminilabs site_reviews Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 2, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.04%Oct 2, 2026
- UnknownMelapress wp_activity_log Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.59%Oct 2, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.36%Oct 2, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Oct 2, 2026
- High7.6Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by sup…Check if you run itEPSS 0.29%Oct 1, 2026
- High8.4Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an…Check if you run itEPSS 0.13%Oct 1, 2026
Sort