Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.48%Oct 12, 2026
- Medium5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.22%Oct 12, 2026
- Medium5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.22%Oct 12, 2026
- UnknownCVE-2026-81839 is listed by GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8.Check if you run itEPSS 0.28%Oct 12, 2026
- Medium5.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could havCheck if you run itEPSS 0.29%Oct 12, 2026
- High8.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.34%Oct 12, 2026
- Medium5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.26%Oct 12, 2026
- High8.2GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed aCheck if you run itEPSS 0.39%Oct 12, 2026
- UnknownLangflow Langflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.05%Oct 12, 2026
- Critical9.3TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web.Check if you run itEPSS 0.54%Oct 12, 2026
- Medium6.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.16%Oct 12, 2026
- Medium4.6GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configuratiCheck if you run itEPSS 0.09%Oct 12, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.05%Oct 12, 2026
- Medium5.5A security vulnerability has been detected in bleenco abstruse up to 2.1.0.Check if you run itEPSS 0.70%Oct 11, 2026
- Low2.1A security flaw has been discovered in zhayujie CowAgent up to 2.2.0.Check if you run itEPSS 0.28%Oct 11, 2026
- High7.8GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs.Check if you run itEPSS 0.65%Oct 11, 2026
- High7.8The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData().Check if you run itEPSS 0.11%Oct 11, 2026
- High7.8The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c declared two variab…Check if you run itEPSS 0.12%Oct 11, 2026
- High7.1net_route_ipv6_packet() in subsys/net/ip/route_ipv6.c resolved the nexthop's link-layer address with net_nbr_get_lladdr(nbr->idx) without first checking whether the ne…Check if you run itEPSS 0.22%Oct 11, 2026
- Medium6.8The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK…Check if you run itEPSS 0.17%Oct 11, 2026
- Low3.4The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion.Check if you run itEPSS 0.11%Oct 11, 2026
- High7.1omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may includ…Check if you run itEPSS 0.37%Oct 11, 2026
- Medium5.3Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs.Check if you run itEPSS 0.28%Oct 11, 2026
- High7.2pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members t…Check if you run itEPSS 0.38%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any authenticated user to rea…Check if you run itEPSS 0.19%Oct 11, 2026
Sort