Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Gitea's repository migration API accepts a public-only token when the request specifies creation of a private repository.Check if you run itEPSS 0.38%Oct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.13%Oct 14, 2026
- UnknownCVE-2026-53613 affecting package util-linux 2.40.2-6Open the advisoryOct 14, 2026
- Critical9.3Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths.Check if you run itEPSS 2.52%Oct 14, 2026
- Critical9.3Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because…Check if you run itEPSS 0.72%Oct 14, 2026
- UnknownCVE-2026-98406 affecting package kernel 6.6.157.1-1Open the advisoryOct 14, 2026
- High7.8Important: kernel security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- Medium5.4Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts.Check if you run itEPSS 0.13%Oct 14, 2026
- High8.8The insights-runtime-extractor runs as a privileged DaemonSet ( ) that scans container processes for runtime fingerprinting.Check if you run itEPSS 0.17%Oct 14, 2026
- Unknown[Probably Solved] KVM Escape, publication. CVE-2026-64561, ZAPScapeCheck if you run itEPSS 0.35%Oct 14, 2026
- UnknownPublished: 2026-07-06 Description Description Severity Notes A virtualization vulnerability has been identified in the KVM x86 shadow paging and nested virtualization…Check if you run itEPSS 0.98%Oct 14, 2026
- UnknownPublished: 2026-09-16 Description Description Severity Notes An Improper Privilege Management vulnerability in Google Security Operations SOAR was patched with version…Check if you run itEPSS 0.23%Oct 14, 2026
- HighGitea SSRF through Git HTTP redirects in mirrors and fetchesCheck if you run itEPSS 0.26%Oct 14, 2026
- High8.8Koha is vulnerable to OS command injection in the Task Scheduler deletion path.Check if you run itEPSS 1.61%Oct 14, 2026
- Unknownlibyaml-perl vulnerabilitiesOpen the advisoryOct 14, 2026
- UnknownMalicious code in @flexmr/utils (npm)Open the advisoryOct 14, 2026
- Highwifi: mac80211: don't warn when an IBSS has no channel to scanCheck if you run itEPSS 0.21%Oct 14, 2026
- HighCVE-2026-98407: wifi: rsi: fix heap OOB write on key removalCheck if you run itEPSS 0.22%Oct 14, 2026
- Highwifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driverCheck if you run itEPSS 0.22%Oct 14, 2026
- Low3.1Apprise forwards configured auth headers across cross-origin HTTP redirectsCheck if you run itEPSS 0.32%Oct 14, 2026
- UnknownImportant: kernel security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- High7.5Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 0.75%Oct 13, 2026
- Critical9.8Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 0.89%Oct 13, 2026
- High7.1Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to retrieve other operators' BCrypt password hashe…Check if you run itEPSS 0.50%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.Check if you run itEPSS 0.29%Oct 13, 2026