Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownREJECTED: CVE-2026-80726: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow pageOpen the advisorySep 3, 2026
- UnknownCVE-2026-78304Open the advisorySep 3, 2026
- Medium4.1Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API.Check if you run itEPSS 0.36%Sep 3, 2026
- High7.8Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent.Check if you run itEPSS 0.20%Sep 3, 2026
- Medium6.8Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability.Check if you run itEPSS 0.38%Sep 3, 2026
- Medium6.5Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API.Check if you run itEPSS 0.38%Sep 3, 2026
- Medium5.9RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the en…Check if you run itEPSS 0.37%Sep 3, 2026
- High8.5A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underly…Check if you run itEPSS 0.14%Sep 3, 2026
- High8.5A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objec…Check if you run itEPSS 0.14%Sep 3, 2026
- Medium4.6A CSV injection vulnerability exists in SYS600.Check if you run itEPSS 0.21%Sep 3, 2026
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 1.81%Sep 3, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.27%Sep 3, 2026
- UnknownOSGeo geonetwork Missing AuthorizationPatch nowKEVEPSS 0.47%Sep 3, 2026
- UnknownOSGeo geonetwork Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Sep 3, 2026
- UnknownSonatype nexus_repository_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 19.15%Sep 3, 2026
- Critical9.1A flaw was found in submariner.Check if you run itEPSS 1.37%Sep 2, 2026
- High7.8A flaw was found in util-linux.Check if you run itEPSS 0.16%Sep 2, 2026
- High7.0The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW.Check if you run itEPSS 0.19%Sep 2, 2026
- High7.9The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve().Check if you run itEPSS 0.19%Sep 2, 2026
- High8.6Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function.Check if you run itEPSS 0.39%Sep 2, 2026
- Unknownayecode geodirectory Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.40%Sep 2, 2026
- Medium6.5Hono: Incomplete fix for CVE-2026-39408: still writes files outside the output directoryCheck if you run itEPSS 0.44%Sep 1, 2026
- Medium5.3Hono: Unbounded dot-notation nesting in can cause memory exhaustionCheck if you run itEPSS 0.53%Sep 1, 2026
- Medium5.9Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentialsCheck if you run itEPSS 0.45%Sep 1, 2026
- UnknownCVE-2026-77223Open the advisorySep 1, 2026
Sort