Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- MediumRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionCheck if you run itEPSS 0.49%Oct 1, 2026
- HighRabbitMQ: Incomplete fix for CVE-2026-44838: does not escape , leaving room for an MQTT topic permission bypassCheck if you run itEPSS 0.26%Oct 1, 2026
- MediumRabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_statusCheck if you run itEPSS 0.34%Oct 1, 2026
- MediumRabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float expCheck if you run itEPSS 0.34%Oct 1, 2026
- MediumRabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission checkCheck if you run itEPSS 0.43%Oct 1, 2026
- HighRabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UICheck if you run itEPSS 0.15%Oct 1, 2026
- Medium6.1A flaw was found in oauth-proxy.Check if you run itEPSS 0.28%Oct 1, 2026
- Critical9.3The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation.Check if you run itEPSS 0.59%Oct 1, 2026
- High8.8ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.29%Oct 1, 2026
- UnknownRejetto http_file_server Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.91%Oct 1, 2026
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityPatch nowKEVEPSS 4.57%Oct 1, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.81%Oct 1, 2026
- Medium6.1An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size.Check if you run itEPSS 0.28%Sep 30, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanCheck if you run itEPSS 0.37%Sep 30, 2026
- Low2.1[SECURITY] [DSA 6550-1] ghostscript security updateCheck if you run itEPSS 0.32%Sep 30, 2026
- UnknownA vulnerability was determined in Blosc C-Blosc2 up to 3.3.2.Check if you run itEPSS 0.28%Sep 30, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.Check if you run itEPSS 0.25%Sep 30, 2026
- High7.1Crocoblock jetengine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Sep 30, 2026
- High8.5WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerabilityPatch nowKEVEPSS 0.25%Sep 30, 2026
- Medium6.4The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_price_text' parameter…Check if you run itEPSS 0.19%Sep 30, 2026
- Medium6.4The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to…Check if you run itEPSS 0.16%Sep 30, 2026
- UnknownCVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)Check if you run itEPSS 0.16%Sep 30, 2026
- High7.6PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.Check if you run itEPSS 0.27%Sep 30, 2026
- High7.2ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.39%Sep 30, 2026
- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 30, 2026
Sort