Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownThe Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability.Open the advisoryOct 14, 2026
- UnknownThe Drupal core Link module provides a field type that can be used for internal and external URLs.Open the advisoryOct 14, 2026
- UnknownGin is an administration theme that provides a modern, clean, and customizable backend UI for editors and site administrators.Open the advisoryOct 14, 2026
- Low3.7An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through Gra…Check if you run itEPSS 0.29%Oct 14, 2026
- Medium5.3LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters.Check if you run itEPSS 0.22%Oct 14, 2026
- High7.1F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.Check if you run itEPSS 0.44%Oct 14, 2026
- High7.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.Check if you run itEPSS 0.49%Oct 14, 2026
- Low3.3Talos Linux is a Linux distribution built for Kubernetes deployments.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium4.2The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet length of a received frame as pkt_len = rx_frame->length - IEEE802154…Check if you run itEPSS 0.21%Oct 14, 2026
- Medium5.9The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len = len - KW41Z_FCS_LEN…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.40%Oct 14, 2026
- High7.5The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP).Check if you run itEPSS 0.46%Oct 14, 2026
- High8.7A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute…Check if you run itEPSS 0.35%Oct 14, 2026
- High7.1ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a received frame holds a plain 14-byte struct net_eth_hdr.Check if you run itEPSS 0.34%Oct 14, 2026
- High7.5ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text.Check if you run itEPSS 0.09%Oct 14, 2026
- Critical9.3Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and pe…Check if you run itEPSS 0.62%Oct 14, 2026
- Medium6.3Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenti…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.2A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a comp…Check if you run itEPSS 0.37%Oct 14, 2026
- Medium6.9An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based atta…Check if you run itEPSS 0.29%Oct 14, 2026
- Critical9.2An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-ba…Check if you run itEPSS 0.51%Oct 14, 2026
- High8.2An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium5.3An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent att…Check if you run itEPSS 0.22%Oct 14, 2026
- Critical9.9Hestia Control Panel is a lightweight and powerful control panel for the modern web.Check if you run itEPSS 0.68%Oct 14, 2026
- Medium5.9erl_tar:extract/2 loops forever on a GNU sparse member with a trailing holeCheck if you run itEPSS 0.18%Oct 14, 2026
- High8.7HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in BanditCheck if you run itEPSS 0.53%Oct 14, 2026