Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to…Check if you run itEPSS 0.11%Sep 27, 2026
- High7.1Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.14%Sep 27, 2026
- High8.5Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured with CONTRAST_LOG…Check if you run itEPSS 0.19%Sep 27, 2026
- Medium5.1Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.Check if you run itEPSS 0.16%Sep 27, 2026
- High8.5Edgelesssys Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.21%Sep 27, 2026
- Medium6.9Contrast is a Kubernetes runtime for confidential containers.Check if you run itEPSS 0.07%Sep 27, 2026
- Critical9.5Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 78.16%Sep 27, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityPatch nowKEVEPSS 82.16%Sep 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.21%Sep 27, 2026
- Critical10.0Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29Check if you run itEPSS 0.47%Sep 26, 2026
- High8.3Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29Check if you run itEPSS 0.33%Sep 26, 2026
- Critical9.2Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29Check if you run itEPSS 0.42%Sep 26, 2026
- Critical9.4Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29Check if you run itEPSS 1.31%Sep 26, 2026
- Critical9.5Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming…Check if you run itEPSS 0.47%Sep 26, 2026
- High8.3Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-typ…Check if you run itEPSS 0.26%Sep 26, 2026
- Critical9.3JoomlaBoat.comのYoutube GalleryにおけるSQL インジェクションの脆弱性Check if you run itEPSS 0.42%Sep 26, 2026
- High8.3vLLM is an inference and serving engine for large language models.Check if you run itEPSS 0.34%Sep 26, 2026
- Medium4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name.Check if you run itEPSS 0.16%Sep 25, 2026
- Medium5.9When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirec…Check if you run itEPSS 0.29%Sep 25, 2026
- High7.5cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit.Check if you run itEPSS 0.38%Sep 25, 2026
- Low3.3phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check.Check if you run itEPSS 0.16%Sep 25, 2026
- Low3.4The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them.Check if you run itEPSS 0.28%Sep 25, 2026
- Medium6.5The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger.Check if you run itEPSS 0.31%Sep 25, 2026
- High8.1Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.45%Sep 25, 2026
- UnknownCVE-2026-82989 is listed by VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise.Check if you run itEPSS 0.67%Sep 25, 2026
Sort