Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)Check if you run itEPSS 0.31%Oct 1, 2026
- UnknownCVE-2026-63724Open the advisoryOct 1, 2026
- UnknownCVE-2026-63721Open the advisoryOct 1, 2026
- High8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a dirCheck if you run itEPSS 0.43%Oct 1, 2026
- High7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi respCheck if you run itEPSS 0.43%Oct 1, 2026
- High7.5A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of seCheck if you run itEPSS 0.46%Oct 1, 2026
- High7.5Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of serviceCheck if you run itEPSS 0.95%Oct 1, 2026
- High7.5Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configuratiCheck if you run itEPSS 0.44%Oct 1, 2026
- Critical9.8Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions.Check if you run itEPSS 0.49%Oct 1, 2026
- Medium5.3Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebCheck if you run itEPSS 0.46%Oct 1, 2026
- High7.5Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies.Check if you run itEPSS 0.57%Oct 1, 2026
- High7.5Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite.Check if you run itEPSS 0.46%Oct 1, 2026
- High7.5Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause aCheck if you run itEPSS 0.56%Oct 1, 2026
- Medium4.3HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the a…Check if you run itEPSS 0.16%Oct 1, 2026
- Medium5.4OpenStack Swift vulnerable to authenticated server-side request forgeryCheck if you run itEPSS 0.22%Oct 1, 2026
- Critical9.9Foreman: safemode bypass leading to rceCheck if you run itEPSS 0.72%Oct 1, 2026
- Critical9.1Foreman: excessive permissions for viewer role on previewCheck if you run itEPSS 0.35%Oct 1, 2026
- Medium6.3next.js cache leak across root param values in nested 'use cache' functionsCheck if you run itEPSS 0.25%Oct 1, 2026
- UnknownVU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operationsCheck if you run itEPSS 0.18%Oct 1, 2026
- UnknownCVE-2026-97363 is listed by Monta monta.app.Check if you run itEPSS 0.32%Oct 1, 2026
- UnknownCVE-2026-97212 is listed by Monta monta.app.Check if you run itEPSS 0.25%Oct 1, 2026
- UnknownCVE-2026-96613 is listed by Meari IoT Cloud Platform OpenAPI Service.Check if you run itEPSS 0.24%Oct 1, 2026
- UnknownCVE-2026-95102 is listed by Monta monta.app.Check if you run itEPSS 0.36%Oct 1, 2026
- UnknownCVE-2026-94594 is listed by Armatura LLC Armatura One.Check if you run itEPSS 0.11%Oct 1, 2026
- UnknownCVE-2026-94593 is listed by Armatura LLC Armatura One.Check if you run itEPSS 0.11%Oct 1, 2026
Sort