Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 38.93%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityPatch nowKEVEPSS 0.86%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Session Fixation VulnerabilityPatch nowKEVEPSS 1.96%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Sep 30, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.45%Sep 30, 2026
- UnknownCVE-2026-15278Open the advisorySep 29, 2026
- High8.7anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking.Check if you run itEPSS 0.59%Sep 29, 2026
- Medium5.9adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different contentCheck if you run itEPSS 0.23%Sep 29, 2026
- Medium5.3adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() pathCheck if you run itEPSS 0.27%Sep 29, 2026
- UnknownCVE-2026-11415Open the advisorySep 29, 2026
- High8.7Red Hat Enterprise Linux iperf3: Schwachstelle ermöglicht Denial of ServiceCheck if you run itEPSS 0.43%Sep 29, 2026
- Medium5.9The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition.Check if you run itEPSS 0.34%Sep 29, 2026
- High8.2A flaw was found in libsoup.Check if you run itEPSS 0.37%Sep 29, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)Check if you run itEPSS 0.24%Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationCheck if you run itEPSS 0.23%Sep 29, 2026
- Critical9.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.48%Sep 29, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.24%Sep 29, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.13%Sep 29, 2026
- Medium6.3ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c.Check if you run itEPSS 0.32%Sep 29, 2026
- Medium5.9libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.Check if you run itEPSS 0.37%Sep 29, 2026
- High8.6A flaw was found in libsoup.Check if you run itEPSS 0.42%Sep 29, 2026
- High8.6A flaw was found in libsoup.Check if you run itEPSS 0.40%Sep 29, 2026
- High8.6A flaw was found in libsoup.Check if you run itEPSS 0.39%Sep 29, 2026
- High8.2Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.Check if you run itEPSS 0.83%Sep 29, 2026
Sort