Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1wger: Trainer Privilege Escalation - Improper Privilege ManagementCheck if you run itEPSS 0.22%Oct 7, 2026
- High7.1wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)Check if you run itEPSS 0.22%Oct 7, 2026
- High8.8tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()Check if you run itEPSS 0.29%Oct 7, 2026
- UnknownMiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local network attackers to crash the daemon.Check if you run itEPSS 0.46%Oct 7, 2026
- High8.1ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len without first ch…Check if you run itEPSS 0.21%Oct 7, 2026
- Medium6.5A flaw was found in pulp-ansible's bearer-token refresh for collection remotes.Check if you run itEPSS 0.23%Oct 7, 2026
- Medium6.5A flaw was found in pulp-container when it authenticates to an upstream registry.Check if you run itEPSS 0.23%Oct 7, 2026
- Critical9.8Metasploit Wrap Up: Langflow, MongoDB, and MoreCheck this weekEPSS 15.29%Oct 7, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 3.75%Oct 7, 2026
- UnknownCritical Unauthenticated Arbitrary File Upload Vulnerability Exploited in Bricksforge PluginPatch nowKEVEPSS 3.29%Oct 7, 2026
- Low3.6In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.Check if you run itEPSS 0.08%Oct 7, 2026
- High7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.Check if you run itEPSS 0.15%Oct 7, 2026
- Low2.2In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.Check if you run itEPSS 0.14%Oct 7, 2026
- Medium4.2In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.Check if you run itEPSS 0.36%Oct 7, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1Patch nowKEVEPSS 0.98%Oct 7, 2026
- Medium4.9Backstage is an open framework for building developer portals.Check if you run itEPSS 0.27%Oct 6, 2026
- Medium6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.Check if you run itEPSS 0.19%Oct 6, 2026
- Medium4.9Backstage is an open framework for building developer portals.Check if you run itEPSS 0.31%Oct 6, 2026
- Medium4.1Backstage is an open framework for building developer portals.Check if you run itEPSS 0.28%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.21%Oct 6, 2026
- Medium6.4Backstage is an open framework for building developer portals.Check if you run itEPSS 0.27%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.37%Oct 6, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.29%Oct 6, 2026
- High8.1Backstage is an open framework for building developer portals.Check if you run itEPSS 0.28%Oct 6, 2026
- Medium6.8Backstage is an open framework for building developer portals.Check if you run itEPSS 0.31%Oct 6, 2026
Sort