Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0kernel: iavf: Fix reset error handlingCheck if you run itEPSS 0.14%Sep 11, 2026
- High7.8kernel: macvlan: fix possible UAF in macvlan_forward_source()Check if you run itEPSS 0.21%Sep 11, 2026
- High7.3Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.Check if you run itEPSS 0.16%Sep 11, 2026
- Low3.5The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it,…Check if you run itEPSS 0.24%Sep 11, 2026
- Low3.3In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.Check if you run itEPSS 0.16%Sep 11, 2026
- High7.8In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context.Check if you run itEPSS 0.13%Sep 11, 2026
- Medium6.5PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.Check if you run itEPSS 0.27%Sep 11, 2026
- Medium6.5PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.Check if you run itEPSS 0.25%Sep 11, 2026
- High7.4PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.Check if you run itEPSS 0.35%Sep 11, 2026
- Medium5.9PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.Check if you run itEPSS 0.29%Sep 11, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 97.36%Sep 11, 2026
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.10%Sep 11, 2026
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 10, 2026
- High7.5An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets.Check if you run itEPSS 0.43%Sep 10, 2026
- High7.8A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled font index.Check if you run itEPSS 0.17%Sep 10, 2026
- UnknownHCSEC-2026-38 - Consul-template vulnerable to an information disclosure issue in error handlingCheck if you run itEPSS 0.38%Sep 10, 2026
- UnknownHCSEC-2026-37 - Consul vulnerable to an authorization bypass in the Connect service meshCheck if you run itEPSS 0.34%Sep 10, 2026
- UnknownHCSEC-2026-36 - Consul vulnerable to an authorization bypass in the catalog deregistration pathCheck if you run itEPSS 0.31%Sep 10, 2026
- UnknownHCSEC-2026-35 - Consul vulnerable to a denial of service in the native RPC listenerCheck if you run itEPSS 0.41%Sep 10, 2026
- UnknownHCSEC-2026-34 - Consul vulnerable to an authorization bypass in the catalog node-write pathCheck if you run itEPSS 0.37%Sep 10, 2026
- UnknownCVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager AgentCheck if you run itEPSS 0.66%Sep 10, 2026
- UnknownCVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java LibraryCheck if you run itEPSS 0.54%Sep 10, 2026
- High7.0A flaw was found in the admin backend of gvfs.Check if you run itEPSS 0.22%Sep 10, 2026
- Low3.3ZDI-26-670: Adobe Acrobat Pro DC Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityCheck if you run itEPSS 0.26%Sep 10, 2026
- High7.8ZDI-26-662: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.38%Sep 10, 2026
Sort