Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.Check if you run itEPSS 0.16%Sep 11, 2026
- Low3.5The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it,…Check if you run itEPSS 0.24%Sep 11, 2026
- Low3.3In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.Check if you run itEPSS 0.16%Sep 11, 2026
- High7.8In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context.Check if you run itEPSS 0.13%Sep 11, 2026
- Medium6.5PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.Check if you run itEPSS 0.27%Sep 11, 2026
- Medium6.5PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.Check if you run itEPSS 0.25%Sep 11, 2026
- High7.4PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.Check if you run itEPSS 0.35%Sep 11, 2026
- Medium5.9PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.Check if you run itEPSS 0.29%Sep 11, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 97.36%Sep 11, 2026
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.10%Sep 11, 2026
- UnknownHCSEC-2026-38 - Consul-template vulnerable to an information disclosure issue in error handlingCheck if you run itEPSS 0.38%Sep 10, 2026
- UnknownHCSEC-2026-37 - Consul vulnerable to an authorization bypass in the Connect service meshCheck if you run itEPSS 0.34%Sep 10, 2026
- UnknownHCSEC-2026-36 - Consul vulnerable to an authorization bypass in the catalog deregistration pathCheck if you run itEPSS 0.31%Sep 10, 2026
- UnknownHCSEC-2026-35 - Consul vulnerable to a denial of service in the native RPC listenerCheck if you run itEPSS 0.41%Sep 10, 2026
- UnknownHCSEC-2026-34 - Consul vulnerable to an authorization bypass in the catalog node-write pathCheck if you run itEPSS 0.37%Sep 10, 2026
- UnknownCVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager AgentCheck if you run itEPSS 0.66%Sep 10, 2026
- UnknownCVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java LibraryCheck if you run itEPSS 0.54%Sep 10, 2026
- High7.0A flaw was found in the admin backend of gvfs.Check if you run itEPSS 0.22%Sep 10, 2026
- Low3.3ZDI-26-670: Adobe Acrobat Pro DC Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityCheck if you run itEPSS 0.26%Sep 10, 2026
- High7.8ZDI-26-662: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.38%Sep 10, 2026
- High7.8ZDI-26-663: Adobe Acrobat Pro DC Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.38%Sep 10, 2026
- High7.8ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.38%Sep 10, 2026
- High7.8ZDI-26-658: Adobe Acrobat Pro DC JPEG Parsing Integer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.31%Sep 10, 2026
- High7.8ZDI-26-664: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.38%Sep 10, 2026
- High7.8ZDI-26-661: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.38%Sep 10, 2026
Sort