Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A flaw has been found in Eleveo Call Recording Software 9.7.0.Check if you run itEPSS 0.19%Sep 28, 2026
- UnknownVU#762428: Authlib library contains a signature‑verification bypass vulnerabilityCheck if you run itEPSS 0.38%Sep 28, 2026
- UnknownCVE-2026-58464Open the advisorySep 28, 2026
- UnknownCVE-2026-58463Open the advisorySep 28, 2026
- High8.2Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy().Check if you run itEPSS 0.52%Sep 28, 2026
- High8.8Apple Multiple Products Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 26.17%Sep 28, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.14%Sep 28, 2026
- Medium6.9Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0Check if you run itEPSS 0.13%Sep 27, 2026
- Medium5.1Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to…Check if you run itEPSS 0.11%Sep 27, 2026
- High7.1Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.14%Sep 27, 2026
- High8.5Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured with CONTRAST_LOG…Check if you run itEPSS 0.19%Sep 27, 2026
- Medium5.1Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.Check if you run itEPSS 0.16%Sep 27, 2026
- High8.5Edgelesssys Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.21%Sep 27, 2026
- Medium6.9Contrast is a Kubernetes runtime for confidential containers.Check if you run itEPSS 0.07%Sep 27, 2026
- Critical9.5Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 78.16%Sep 27, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityPatch nowKEVEPSS 82.16%Sep 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.21%Sep 27, 2026
- Critical10.0Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29Check if you run itEPSS 0.47%Sep 26, 2026
- High8.3Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29Check if you run itEPSS 0.33%Sep 26, 2026
- Critical9.2Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29Check if you run itEPSS 0.42%Sep 26, 2026
- Critical9.4Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29Check if you run itEPSS 1.31%Sep 26, 2026
- Critical9.5Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming…Check if you run itEPSS 0.47%Sep 26, 2026
- High8.3Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-typ…Check if you run itEPSS 0.26%Sep 26, 2026
- Critical9.3JoomlaBoat.comのYoutube GalleryにおけるSQL インジェクションの脆弱性Check if you run itEPSS 0.42%Sep 26, 2026
- High8.3vLLM is an inference and serving engine for large language models.Check if you run itEPSS 0.34%Sep 26, 2026
Sort