Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3RabbitMQ: Stored XSS via TLS peer-certificate DN in management UICheck if you run itEPSS 0.15%Sep 23, 2026
- High8.2RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoSCheck if you run itEPSS 0.32%Sep 23, 2026
- High7.6RabbitMQ: CORS * reflects Origin with Allow-CredentialsCheck if you run itEPSS 0.37%Sep 23, 2026
- High7.1RabbitMQ: Atom-table exhaustion via reply-to queue name decodingCheck if you run itEPSS 0.33%Sep 23, 2026
- UnknownVU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlersCheck if you run itEPSS 0.24%Sep 23, 2026
- High7.5A denial-of-service flaw was found in gnome-remote-desktop.Check if you run itEPSS 0.91%Sep 23, 2026
- High8.5CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() performs no object-level RBAC.Check if you run itEPSS 0.41%Sep 23, 2026
- Medium4.3HostList.list() catches bare Exception and returns str(e) verbatim.Check if you run itEPSS 0.36%Sep 23, 2026
- UnknownVU#273940: Enterprise Access Management EAM does not rotate RSA keysCheck if you run itEPSS 0.14%Sep 23, 2026
- Critical9.8SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requestsCheck if you run itEPSS 0.74%Sep 23, 2026
- Low2.7IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser.Check if you run itEPSS 0.32%Sep 23, 2026
- Critical9.6Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durCheck if you run itEPSS 0.32%Sep 23, 2026
- High8.6plex media_server External Control of File Name or PathPatch nowKEVEPSS 1.79%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.64%Sep 23, 2026
- Medium6.9plex media_server Improper Neutralization of Encoded URI Schemes in a Web PagePatch nowKEVEPSS 1.95%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.82%Sep 23, 2026
- High7.8A flaw was found in sudo.Check if you run itEPSS 0.32%Sep 23, 2026
- UnknownCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service VulnerabilityCheck if you run itEPSS 0.59%Sep 23, 2026
- High7.8[SECURITY] [DSA 6555-1] librsvg security updateCheck if you run itEPSS 0.53%Sep 23, 2026
- High7.8A code execution flaw was found in Emacs, affecting versions prior to 31.2.Check if you run itEPSS 0.20%Sep 23, 2026
- High8.8A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration valu…Check if you run itEPSS 0.15%Sep 23, 2026
- Medium6.8The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing use…Check if you run itEPSS 0.43%Sep 23, 2026
- High7.8ZDI-26-747: Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.14%Sep 23, 2026
- High7.8ZDI-26-748: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution VulnerabilityCheck if you run itEPSS 0.22%Sep 23, 2026
- High7.8ZDI-26-746: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.11%Sep 23, 2026
Sort