Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8ZDI-26-681: Linux Kernel FUSE Subsystem Race Condition Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.17%Sep 14, 2026
- Medium6.7ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure VulnerabilityCheck if you run itEPSS 0.51%Sep 14, 2026
- High8.2ZDI-26-691: Linux Kernel Netlink-based Wireless Configuration Integer Overflow Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.13%Sep 14, 2026
- Medium6.0ZDI-26-690: Linux Kernel MCTP Routing Uninitialized Memory Information Disclosure VulnerabilityCheck if you run itEPSS 0.14%Sep 14, 2026
- High7.8ZDI-26-700: Linux Kernel QFQ Plus Scheduler Use-After-Free Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.24%Sep 14, 2026
- Medium4.3N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresse…Check if you run itEPSS 0.34%Sep 14, 2026
- Low2.5libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_wri…Check if you run itEPSS 0.16%Sep 14, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScr…Check if you run itEPSS 0.27%Sep 14, 2026
- UnknownStellarWP the_events_calendar Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.39%Sep 14, 2026
- Critical9.8Cisco Secure Email Gateway SQL Injection VulnerabilityPatch nowKEVEPSS 29.54%Sep 14, 2026
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Sep 14, 2026
- High7.1FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c.Check if you run itEPSS 0.12%Sep 13, 2026
- High7.1FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.Check if you run itEPSS 0.16%Sep 13, 2026
- Low3.5Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder.Check if you run itEPSS 0.27%Sep 13, 2026
- Medium6.3Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw i…Check if you run itEPSS 0.14%Sep 13, 2026
- Low1.8Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor.Check if you run itEPSS 0.12%Sep 13, 2026
- Low3.0Floodlight 71fe8a7 allows disruption of host communication via link spoofing.Check if you run itEPSS 0.18%Sep 13, 2026
- Unknownzstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated aCheck if you run itEPSS 0.62%Sep 12, 2026
- UnknownCVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)Check if you run itEPSS 0.17%Sep 12, 2026
- UnknownCVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)Check if you run itEPSS 0.66%Sep 12, 2026
- UnknownCVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)Check if you run itEPSS 0.60%Sep 12, 2026
- UnknownCVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.26%Sep 12, 2026
- UnknownCVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)Check if you run itEPSS 0.11%Sep 12, 2026
- UnknownStellarWP the_events_calendar Deserialization of Untrusted DataPatch nowKEVEPSS 1.47%Sep 12, 2026
- High7.4libde265 is an open source implementation of the h.265 video codec.Check if you run itEPSS 0.39%Sep 11, 2026
Sort