Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityCheck if you run itEPSS 0.41%Sep 16, 2026
- High7.7ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityCheck if you run itEPSS 0.41%Sep 16, 2026
- High7.8ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.43%Sep 16, 2026
- High8.1ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.89%Sep 16, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 75.60%Sep 16, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownCrocoblock jetformbuilder Incorrect Privilege AssignmentPatch nowKEVEPSS 0.24%Sep 16, 2026
- UnknownImproper Certificate ValidationPatch nowKEVEPSS 5.00%Sep 16, 2026
- Medium5.5A flaw was found in Podman.Check if you run itEPSS 0.39%Sep 15, 2026
- UnknownHCSEC-2026-39 - Go-getter vulnerable to a privilege escalation issue in its archive decompression handlingCheck if you run itEPSS 0.11%Sep 15, 2026
- High8.5Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 i…Check if you run itEPSS 0.19%Sep 15, 2026
- High7.3A flaw was found in environment-modules.Check if you run itEPSS 0.23%Sep 15, 2026
- High8.2Tornado before 6.5.7 Credential Leak via Handle ReuseCheck if you run itEPSS 0.24%Sep 15, 2026
- High8.7Tornado before 6.5.8 Memory Amplification DoS via multipartCheck if you run itEPSS 0.42%Sep 15, 2026
- Critical9.0Tornado before 6.4.1 HTTP Request Smuggling via Transfer-EncodingCheck if you run itEPSS 0.36%Sep 15, 2026
- Critical9.0Tornado before 6.3.3 HTTP Request Smuggling via Content-LengthCheck if you run itEPSS 0.38%Sep 15, 2026
- Medium6.5NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module.Check if you run itEPSS 0.26%Sep 15, 2026
- Low3.7The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received dur…Check if you run itEPSS 0.27%Sep 15, 2026
- UnknownA vulnerability has been found in luben zstd-jni up to 1.5.7-13.Check if you run itEPSS 0.54%Sep 15, 2026
- UnknownUse of Hard-coded Cryptographic KeyPatch nowKEVEPSS 2.70%Sep 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 0.23%Sep 15, 2026
- UnknownContent-Encoding WAF EvasionCheck if you run itEPSS 0.31%Sep 15, 2026
- High8.8Google Pixel Improper Authorization VulnerabilityPatch nowKEVEPSS 0.63%Sep 15, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.69%Sep 15, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 1.20%Sep 15, 2026
Sort