Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1smb: client: fix potential OOB read in smb3_enum_snapshots()Check if you run itEPSS 0.44%Oct 6, 2026
- High7.8drm/ttm: fix swapped-out resources never leaving their bulk_move rangeCheck if you run itEPSS 0.16%Oct 6, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments allows Blind SQL IPatch nowKEVEPSS 0.37%Oct 6, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)Open the advisoryOct 6, 2026
- Medium5.5A flaw was found in SSSD.Check if you run itEPSS 0.10%Oct 6, 2026
- Medium5.5A flaw was found in SSSD.Check if you run itEPSS 0.10%Oct 6, 2026
- UnknownCVE-2026-94543 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.51%Oct 6, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.62%Oct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.60%Oct 6, 2026
- UnknownImportant: firefox security updateOpen the advisoryOct 6, 2026
- UnknownImportant: nodejs:22 security updateOpen the advisoryOct 6, 2026
- High8.4PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encodingCheck if you run itEPSS 0.19%Oct 5, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionCheck if you run itEPSS 0.19%Oct 5, 2026
- Medium5.4Filament: Multi-factor authentication (app) management actions do not require password reauthenticationCheck if you run itEPSS 0.35%Oct 5, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresCheck if you run itEPSS 0.27%Oct 5, 2026
- Unknownuv: Path traversal on Windows through wheel extractionCheck if you run itEPSS 0.43%Oct 5, 2026
- Medium5.3Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundariesOpen the advisoryOct 5, 2026
- High7.5vLLM is an inference and serving engine for large language models.Check if you run itEPSS 0.41%Oct 5, 2026
- Medium6.5Snowflake drivers writes sensitive information to logsCheck if you run itEPSS 0.09%Oct 5, 2026
- Medium5.9PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustionCheck if you run itEPSS 0.39%Oct 5, 2026
- Low3.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.19%Oct 5, 2026
- Medium5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.42%Oct 5, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsPatch nowKEVEPSS 99.48%Oct 5, 2026
- Medium5.5A flaw was found in sssd.Check if you run itEPSS 0.12%Oct 5, 2026
Sort