Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 25, 2026
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 25, 2026
- UnknownCVE-2026-7800Open the advisorySep 25, 2026
- UnknownCVE-2026-7799Open the advisorySep 25, 2026
- UnknownCVE-2026-53973Open the advisorySep 25, 2026
- UnknownCVE-2026-53972Open the advisorySep 25, 2026
- UnknownCVE-2026-53971Open the advisorySep 25, 2026
- UnknownCVE-2026-49118Open the advisorySep 25, 2026
- UnknownCVE-2026-49117Open the advisorySep 25, 2026
- UnknownCVE-2026-45241Open the advisorySep 25, 2026
- UnknownCVE-2026-45240Open the advisorySep 25, 2026
- UnknownCVE-2026-45239Open the advisorySep 25, 2026
- UnknownCVE-2026-45238Open the advisorySep 25, 2026
- UnknownCVE-2026-45237Open the advisorySep 25, 2026
- UnknownCVE-2026-45236Open the advisorySep 25, 2026
- UnknownCVE-2026-45235Open the advisorySep 25, 2026
- UnknownCVE-2026-45234Open the advisorySep 25, 2026
- UnknownCVE-2026-9313Open the advisorySep 25, 2026
- Medium4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name.Check if you run itEPSS 0.16%Sep 25, 2026
- Medium5.9When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirec…Check if you run itEPSS 0.29%Sep 25, 2026
- High7.5cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit.Check if you run itEPSS 0.38%Sep 25, 2026
- Low3.3phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check.Check if you run itEPSS 0.16%Sep 25, 2026
- UnknownCVE-2026-57864Open the advisorySep 25, 2026
- Low3.4The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them.Check if you run itEPSS 0.28%Sep 25, 2026
- Medium6.5The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger.Check if you run itEPSS 0.31%Sep 25, 2026
Sort