Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scopeCheck if you run itEPSS 0.34%Sep 9, 2026
- UnknownCVE-2026-85786 is listed by CVE-2026-85786 - Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java.Check if you run itEPSS 0.58%Sep 9, 2026
- UnknownCVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI DriverCheck if you run itEPSS 0.44%Sep 9, 2026
- UnknownCVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsCheck if you run itEPSS 0.54%Sep 9, 2026
- UnknownCVE-2026-83497 - OpenSearch SQL Plugin - Unrestricted Java Deserialization in Cursor PaginationCheck if you run itEPSS 0.96%Sep 9, 2026
- UnknownCVE-2026-81838 - Zip Slip path traversal in awsdac (diagram-as-code)Check if you run itEPSS 0.20%Sep 9, 2026
- UnknownCVE-2026-78379 - Consent bypass in Strands Agents Tools python_repl toolCheck if you run itEPSS 0.57%Sep 9, 2026
- UnknownCVE-2026-75936 is listed by CVE-2026-85786 - Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java.Check if you run itEPSS 0.61%Sep 9, 2026
- UnknownCVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities routeCheck if you run itEPSS 0.72%Sep 9, 2026
- Low3.0Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute fil…Check if you run itEPSS 0.33%Sep 9, 2026
- Medium4.3The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read.Check if you run itEPSS 0.39%Sep 9, 2026
- High7.5A flaw was found in SSSD's IdP authentication provider.Check if you run itEPSS 0.33%Sep 9, 2026
- High8.1A flaw was found in FreeIPA.Check if you run itEPSS 0.53%Sep 9, 2026
- High7.2CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)Check if you run itEPSS 0.67%Sep 9, 2026
- Medium4.0CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)Check if you run itEPSS 0.78%Sep 9, 2026
- Low1.1CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)Check if you run itEPSS 0.51%Sep 9, 2026
- UnknownCVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM)Check if you run itEPSS 0.15%Sep 9, 2026
- UnknownCVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM)Check if you run itEPSS 0.14%Sep 9, 2026
- UnknownCVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.34%Sep 9, 2026
- UnknownCVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File (Severity: LOW)Check if you run itEPSS 0.18%Sep 9, 2026
- Unknownzstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to beCheck if you run itEPSS 0.21%Sep 9, 2026
- Unknownzstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sCheck if you run itEPSS 0.39%Sep 9, 2026
- Unknownzstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowingCheck if you run itEPSS 0.43%Sep 9, 2026
- Medium6.9PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources.Check if you run itEPSS 0.55%Sep 9, 2026
- High8.8A flaw was found in bubblewrap.Check if you run itEPSS 0.21%Sep 9, 2026
Sort