Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8ZDI-26-653: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityOpen the advisorySep 10, 2026
- High7.8ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation VulnerabilityOpen the advisorySep 10, 2026
- UnknownCVE-2026-88765 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.68%Sep 10, 2026
- UnknownN-able N-central Incomplete Filtering of Special ElementsPatch nowKEVEPSS 1.12%Sep 10, 2026
- UnknownCVE-2026-82837 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.23%Sep 10, 2026
- UnknownCVE-2026-79708 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.38%Sep 10, 2026
- UnknownCVE-2026-78252 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.27%Sep 10, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Sep 10, 2026
- UnknownSogou Input Method 'biz_helper' Remote Code ExecutionPatch nowKEVEPSS 0.93%Sep 10, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- UnknownCVE-2026-19619 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.30%Sep 10, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.54%Sep 10, 2026
- UnknownCVE-2026-13210 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.35%Sep 10, 2026
- UnknownCVE-2026-12910 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.34%Sep 10, 2026
- UnknownCVE-2026-1168 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.64%Sep 10, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.83%Sep 10, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.73%Sep 10, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could haveCheck if you run itEPSS 0.64%Sep 10, 2026
- Unknownsensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 63.60%Sep 10, 2026
- UnknownCVE-2024-11222 is listed by GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8.Check if you run itEPSS 0.36%Sep 10, 2026
- UnknownCVE-2026-19643 is listed by CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++.Check if you run itEPSS 0.56%Sep 9, 2026
- UnknownCVE-2026-19642 is listed by CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++.Check if you run itEPSS 0.50%Sep 9, 2026
- UnknownCVE-2026-18657Check if you run itEPSS 0.23%Sep 9, 2026
- UnknownCVE-2026-18656Check if you run itEPSS 0.22%Sep 9, 2026
- UnknownCVE-2026-85788 - Issue with awslabs mysql-mcp-serverCheck if you run itEPSS 0.18%Sep 9, 2026
Sort