Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured…Check if you run itEPSS 0.19%Oct 9, 2026
- Unknownzip: creates symbolic links whose attacker-controlled targets are outside the destination directoryOpen the advisoryOct 9, 2026
- High7.3Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege EscalationOpen the advisoryOct 9, 2026
- UnknownPoly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or moreOpen the advisoryOct 9, 2026
- UnknownMIKEY message MAC is never verified on receive, so forged messages are acceptedOpen the advisoryOct 9, 2026
- UnknownPre-shared key mode transmits the TGK in cleartext, exposing the SRTP master keyOpen the advisoryOct 9, 2026
- UnknownCVE-2026-53010 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.44%Oct 9, 2026
- UnknownCVE-2026-52993 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.40%Oct 9, 2026
- UnknownCVE-2026-52982 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.54%Oct 9, 2026
- UnknownCVE-2026-52958 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.73%Oct 9, 2026
- UnknownCVE-2026-52955 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.38%Oct 9, 2026
- UnknownCVE-2026-52931 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.50%Oct 9, 2026
- UnknownCVE-2026-52914 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.63%Oct 9, 2026
- UnknownSecurity update for unboundOpen the advisoryOct 9, 2026
- UnknownSecurity update for python-PyJWTOpen the advisoryOct 9, 2026
- UnknownCGA-qwf4-5xhv-xq54Open the advisoryOct 9, 2026
- UnknownSecurity update for openssl-3Open the advisoryOct 9, 2026
- UnknownCGA-xjhf-9jv7-7x78Open the advisoryOct 9, 2026
- UnknownCGA-w74x-3c39-v8mcOpen the advisoryOct 9, 2026
- UnknownCGA-xqgj-wr32-m4rhOpen the advisoryOct 9, 2026
- High7.5In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS.Check if you run itEPSS 0.30%Oct 9, 2026
- Critical9.1Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCo…Check if you run itEPSS 0.22%Oct 9, 2026
- High7.5Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions.Check if you run itEPSS 0.45%Oct 9, 2026
- Medium6.1Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication.Check if you run itEPSS 0.36%Oct 9, 2026
- High7.5CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap.Check if you run itEPSS 0.37%Oct 9, 2026
Sort