Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issuePatch nowKEVEPSS 0.24%Oct 3, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 11.39%Oct 3, 2026
- Medium5.5Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret valuesCheck if you run itEPSS 0.13%Oct 2, 2026
- Critical10.0Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chainCheck if you run itEPSS 0.36%Oct 2, 2026
- High7.5Vibe-Trading file-read tools expose arbitrary server-readable filesCheck if you run itEPSS 0.43%Oct 2, 2026
- Critical10.0Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRFCheck if you run itEPSS 0.58%Oct 2, 2026
- Medium5.4Trigger.dev: Cross-environment deployment cancelCheck if you run itEPSS 0.22%Oct 2, 2026
- High7.7Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function nameCheck if you run itEPSS 0.28%Oct 2, 2026
- Medium5.3Trigger.dev: Unauthenticated Realtime Stream Data Injection via Run FriendlyIdCheck if you run itEPSS 0.27%Oct 2, 2026
- Critical9.2Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure CompromiseCheck if you run itEPSS 0.51%Oct 2, 2026
- Medium5.4Trigger.dev: Blind SSRF via alert-channel webhookCheck if you run itEPSS 0.24%Oct 2, 2026
- UnknownCVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker DistributionCheck if you run itEPSS 1.45%Oct 2, 2026
- UnknownCVE-2026-103958 is listed by CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS.Check if you run itEPSS 0.35%Oct 2, 2026
- UnknownCVE-2026-103957 is listed by CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS.Check if you run itEPSS 0.40%Oct 2, 2026
- UnknownCVE-2026-20273 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20272 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.57%Oct 2, 2026
- UnknownCVE-2026-20271 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20270 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20269 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20268 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20267 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.38%Oct 2, 2026
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 2.75%Oct 2, 2026
- High8.8Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree PathsCheck if you run itEPSS 0.67%Oct 2, 2026
- High7.1Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object ResolutionCheck if you run itEPSS 0.31%Oct 2, 2026
- High8.6Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protectionsCheck if you run itEPSS 0.15%Oct 2, 2026
Sort