Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.5libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_wri…Check if you run itEPSS 0.16%Sep 14, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScr…Check if you run itEPSS 0.27%Sep 14, 2026
- UnknownStellarWP the_events_calendar Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.39%Sep 14, 2026
- Critical9.8Cisco Secure Email Gateway SQL Injection VulnerabilityPatch nowKEVEPSS 29.54%Sep 14, 2026
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Sep 14, 2026
- High7.1FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c.Check if you run itEPSS 0.12%Sep 13, 2026
- High7.1FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.Check if you run itEPSS 0.16%Sep 13, 2026
- Low3.5Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder.Check if you run itEPSS 0.27%Sep 13, 2026
- Medium6.3Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw i…Check if you run itEPSS 0.14%Sep 13, 2026
- Low1.8Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor.Check if you run itEPSS 0.12%Sep 13, 2026
- Low3.0Floodlight 71fe8a7 allows disruption of host communication via link spoofing.Check if you run itEPSS 0.18%Sep 13, 2026
- Unknownzstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated aCheck if you run itEPSS 0.62%Sep 12, 2026
- UnknownCVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)Check if you run itEPSS 0.17%Sep 12, 2026
- UnknownCVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)Check if you run itEPSS 0.66%Sep 12, 2026
- UnknownCVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)Check if you run itEPSS 0.60%Sep 12, 2026
- UnknownCVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.26%Sep 12, 2026
- UnknownCVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)Check if you run itEPSS 0.11%Sep 12, 2026
- UnknownStellarWP the_events_calendar Deserialization of Untrusted DataPatch nowKEVEPSS 1.47%Sep 12, 2026
- High7.4libde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.39%Sep 11, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writeback_store() Patch series "zram: fix stale scan bounds after…Check if you run itEPSS 0.17%Sep 11, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispatch nlmsvc_ops is published by nfsd_lockd_init() and clear…Check if you run itEPSS 0.55%Sep 11, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch() sets rq_s…Check if you run itEPSS 0.16%Sep 11, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on session freed during unlock check_new_map() iterates mdsc->sess…Check if you run itEPSS 0.67%Sep 11, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: cifs: call pagecache_isize_extended() in cifs_setsize() when extending cifs_setsize() calls truncat…Check if you run itEPSS 0.21%Sep 11, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file…Check if you run itEPSS 0.18%Sep 11, 2026
Sort