Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string).Check if you run itEPSS 0.15%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).Check if you run itEPSS 0.15%Oct 14, 2026
- Medium6.9Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host s…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.2TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs…Check if you run itEPSS 0.44%Oct 14, 2026
- Medium6.9Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordings_path viaCheck if you run itEPSS 0.46%Oct 14, 2026
- Medium6.8unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap allocations via unchecked cabinet headeCheck if you run itEPSS 0.17%Oct 14, 2026
- Medium6.9MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's lenCheck if you run itEPSS 0.17%Oct 14, 2026
- High7.1libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB servers to trigger heap out-of-bounds reads via crafted securit…Check if you run itEPSS 0.55%Oct 14, 2026
- High7.1libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info that allows malicious SM…Check if you run itEPSS 0.47%Oct 14, 2026
- High7.1libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients by sending an unchecked FileNamCheck if you run itEPSS 0.45%Oct 14, 2026
- Medium4.8CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by supplying crafted ADF node headers.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unva…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.9Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process b…Check if you run itEPSS 0.67%Oct 14, 2026
- Medium4.8Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model dire…Check if you run itEPSS 0.24%Oct 14, 2026
- Low3.1miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check aftCheck if you run itEPSS 0.29%Oct 14, 2026
- Low2.3miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds viCheck if you run itEPSS 0.29%Oct 14, 2026
- Medium6.9libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode valuesCheck if you run itEPSS 0.17%Oct 14, 2026
- Medium6.33proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak…Check if you run itEPSS 0.36%Oct 14, 2026
- High7.8mise manages dev tools like node, python, cmake, and terraform.Check if you run itEPSS 0.19%Oct 14, 2026
- Critical9.1Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.39%Oct 14, 2026
- Medium5.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.37%Oct 14, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.69%Oct 14, 2026
- Medium6.5Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.41%Oct 14, 2026
- Medium6.5Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool.Check if you run itEPSS 0.42%Oct 14, 2026
- Critical9.2Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is usedCheck if you run itEPSS 0.74%Oct 14, 2026