Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5CGA-x69v-hf39-rqv3Open the advisoryOct 14, 2026
- High7.5CGA-rpmq-qxjw-p8jfOpen the advisoryOct 14, 2026
- Medium5.9CGA-mcpx-xh5c-6v5rOpen the advisoryOct 14, 2026
- Medium5.9Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_…Check if you run itEPSS 0.39%Oct 14, 2026
- High8.8Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user th…Check if you run itEPSS 0.37%Oct 14, 2026
- High7.5An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service.Check if you run itEPSS 0.40%Oct 14, 2026
- UnknownSecurity update for containerdOpen the advisoryOct 14, 2026
- UnknownSecurity update for glibcOpen the advisoryOct 14, 2026
- High8.7Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or una…Check if you run itEPSS 0.92%Oct 14, 2026
- Critical9.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc.Check if you run itEPSS 1.70%Oct 14, 2026
- Critical9.8Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc.Check if you run itEPSS 1.68%Oct 14, 2026
- Medium5.5A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.08%Oct 14, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.Check if you run itEPSS 0.44%Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected X…Check if you run itEPSS 0.20%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.Th…Check if you run itEPSS 0.27%Oct 14, 2026
- High7.3Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security L…Check if you run itEPSS 0.26%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in Magepeople inc.Check if you run itEPSS 0.26%Oct 14, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored…Check if you run itEPSS 0.18%Oct 14, 2026
- High7.3Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast L…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Inco…Check if you run itEPSS 0.21%Oct 14, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3.Check if you run itEPSS 0.41%Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.This issu…Check if you run itEPSS 0.20%Oct 14, 2026
- High7.5CGA-pxv3-fx8w-ghvvOpen the advisoryOct 14, 2026
- High7.5CGA-r7hc-6ww5-xc3hOpen the advisoryOct 14, 2026
- High7.5CGA-xrp3-6664-27gmOpen the advisoryOct 14, 2026
Sort