Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownOSGeo geonetwork Missing AuthorizationPatch nowKEVEPSS 0.47%Sep 3, 2026
- UnknownOSGeo geonetwork Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Sep 3, 2026
- UnknownSonatype nexus_repository_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 19.15%Sep 3, 2026
- Critical9.1A flaw was found in submariner.Check if you run itEPSS 1.37%Sep 2, 2026
- High7.8A flaw was found in util-linux.Check if you run itEPSS 0.16%Sep 2, 2026
- High7.0The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW.Check if you run itEPSS 0.19%Sep 2, 2026
- High7.9The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve().Check if you run itEPSS 0.19%Sep 2, 2026
- High8.6Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function.Check if you run itEPSS 0.39%Sep 2, 2026
- Unknownayecode geodirectory Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.40%Sep 2, 2026
- Medium6.5Hono: Incomplete fix for CVE-2026-39408: still writes files outside the output directoryCheck if you run itEPSS 0.44%Sep 1, 2026
- Medium5.3Hono: Unbounded dot-notation nesting in can cause memory exhaustionCheck if you run itEPSS 0.53%Sep 1, 2026
- Medium5.9Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentialsCheck if you run itEPSS 0.45%Sep 1, 2026
- UnknownCVE-2026-77223Open the advisorySep 1, 2026
- UnknownCVE-2026-77222Open the advisorySep 1, 2026
- UnknownCVE-2026-77221Open the advisorySep 1, 2026
- Low2.9FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c.Check if you run itEPSS 0.18%Sep 1, 2026
- Critical9.8ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityCheck if you run itEPSS 0.52%Sep 1, 2026
- High8.8A flaw was found in the SFTP backend in gvfs.Check if you run itEPSS 0.62%Sep 1, 2026
- High7.5A flaw was found in openshift/oauth-server.Check if you run itEPSS 0.70%Sep 1, 2026
- High8.7Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.Check if you run itEPSS 0.88%Sep 1, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.51%Sep 1, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- UnknownTenda ch22_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.75%Sep 1, 2026
- Unknownproxmox virtual_environment Missing Critical Step in AuthenticationPatch nowKEVEPSS 3.02%Sep 1, 2026
Sort