Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2RabbitMQ: Web-MQTT decompression bombCheck if you run itEPSS 0.39%Sep 23, 2026
- High7.1RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated sizeCheck if you run itEPSS 0.30%Sep 23, 2026
- High7.2A flaw was found in the Ansible Automation Platform automation controller.Check if you run itEPSS 0.80%Sep 23, 2026
- Medium6.4A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend.Check if you run itEPSS 0.29%Sep 23, 2026
- Medium6.5A flaw was found in the automation-controller notification subsystem.Check if you run itEPSS 0.44%Sep 23, 2026
- Critical9.2RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetchCheck if you run itEPSS 0.20%Sep 23, 2026
- High7.3RabbitMQ: Stored XSS via TLS peer-certificate DN in management UICheck if you run itEPSS 0.15%Sep 23, 2026
- High8.2RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoSCheck if you run itEPSS 0.32%Sep 23, 2026
- High7.6RabbitMQ: CORS * reflects Origin with Allow-CredentialsCheck if you run itEPSS 0.37%Sep 23, 2026
- High7.1RabbitMQ: Atom-table exhaustion via reply-to queue name decodingCheck if you run itEPSS 0.33%Sep 23, 2026
- UnknownVU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlersCheck if you run itEPSS 0.24%Sep 23, 2026
- High7.5A denial-of-service flaw was found in gnome-remote-desktop.Check if you run itEPSS 0.91%Sep 23, 2026
- High8.5CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() performs no object-level RBAC.Check if you run itEPSS 0.41%Sep 23, 2026
- Medium4.3HostList.list() catches bare Exception and returns str(e) verbatim.Check if you run itEPSS 0.36%Sep 23, 2026
- UnknownVU#273940: Enterprise Access Management EAM does not rotate RSA keysCheck if you run itEPSS 0.14%Sep 23, 2026
- Critical9.8SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requestsCheck if you run itEPSS 0.74%Sep 23, 2026
- Low2.7IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser.Check if you run itEPSS 0.32%Sep 23, 2026
- Critical9.6Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durCheck if you run itEPSS 0.32%Sep 23, 2026
- High8.6plex media_server External Control of File Name or PathPatch nowKEVEPSS 1.79%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.64%Sep 23, 2026
- Medium6.9plex media_server Improper Neutralization of Encoded URI Schemes in a Web PagePatch nowKEVEPSS 1.95%Sep 23, 2026
- Medium5.3plex media_server Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.82%Sep 23, 2026
- High7.8A flaw was found in sudo.Check if you run itEPSS 0.32%Sep 23, 2026
- UnknownCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service VulnerabilityCheck if you run itEPSS 0.59%Sep 23, 2026
- High7.8[SECURITY] [DSA 6555-1] librsvg security updateCheck if you run itEPSS 0.54%Sep 23, 2026
Sort