Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve…Check if you run itEPSS 0.08%Oct 9, 2026
- Medium6.3Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement…Check if you run itEPSS 0.21%Oct 9, 2026
- High7.1HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to th…Check if you run itEPSS 0.27%Oct 9, 2026
- Critical9.4Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.57%Oct 9, 2026
- High7.5Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.47%Oct 9, 2026
- Medium5.4A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon.Check if you run itEPSS 0.14%Oct 9, 2026
- UnknownCGA-x8fv-3gfh-qp82Open the advisoryOct 9, 2026
- UnknownMalicious code in pxnpm (npm)Open the advisoryOct 9, 2026
- UnknownCGA-wvw4-368f-rv3jOpen the advisoryOct 9, 2026
- UnknownCGA-xv6m-c5q8-vpxrOpen the advisoryOct 9, 2026
- High8.5Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipul…Check if you run itEPSS 0.09%Oct 9, 2026
- High8.8Improper input validation vulnerability in Apache Camel Karavan.Check if you run itEPSS 0.39%Oct 9, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.Check if you run itEPSS 0.52%Oct 9, 2026
- UnknownCGA-xw23-wphx-79xmOpen the advisoryOct 9, 2026
- UnknownCGA-w29c-3cvf-3vcjOpen the advisoryOct 9, 2026
- UnknownCGA-mc6c-5fwx-vw45Open the advisoryOct 9, 2026
- UnknownCGA-xq3h-hfpf-rw3rOpen the advisoryOct 9, 2026
- UnknownCGA-xrqp-6m5w-w5qfOpen the advisoryOct 9, 2026
- UnknownCGA-xxr9-gwcj-vwg2Open the advisoryOct 9, 2026
- UnknownCGA-xvj9-x545-fxr5Open the advisoryOct 9, 2026
- UnknownCGA-xjmm-6c7p-jhpgOpen the advisoryOct 9, 2026
- Medium5.3Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured…Check if you run itEPSS 0.19%Oct 9, 2026
- Unknownzip: creates symbolic links whose attacker-controlled targets are outside the destination directoryOpen the advisoryOct 9, 2026
- High7.3Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege EscalationOpen the advisoryOct 9, 2026
- UnknownPoly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or moreOpen the advisoryOct 9, 2026
Sort