Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.35%Oct 4, 2026
- High8.8CGA-pm73-7p7w-x548Open the advisoryOct 3, 2026
- High8.6Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 3, 2026
- Medium6.4The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3…Check if you run itEPSS 0.18%Oct 3, 2026
- Low1.8ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an a…Check if you run itEPSS 0.11%Oct 3, 2026
- UnknownRejetto hfs2 Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 5.52%Oct 3, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issuePatch nowKEVEPSS 0.24%Oct 3, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 11.39%Oct 3, 2026
- Medium5.5Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret valuesCheck if you run itEPSS 0.23%Oct 2, 2026
- Critical10.0Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chainCheck if you run itEPSS 0.53%Oct 2, 2026
- High7.5Vibe-Trading file-read tools expose arbitrary server-readable filesCheck if you run itEPSS 0.43%Oct 2, 2026
- Critical10.0Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRFCheck if you run itEPSS 0.58%Oct 2, 2026
- Medium5.4Trigger.dev: Cross-environment deployment cancelCheck if you run itEPSS 0.30%Oct 2, 2026
- High7.7Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function nameCheck if you run itEPSS 0.40%Oct 2, 2026
- Medium5.3Trigger.dev: Unauthenticated Realtime Stream Data Injection via Run FriendlyIdCheck if you run itEPSS 0.38%Oct 2, 2026
- Critical9.2Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure CompromiseCheck if you run itEPSS 0.51%Oct 2, 2026
- HighXray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacksOpen the advisoryOct 2, 2026
- Medium5.4Trigger.dev: Blind SSRF via alert-channel webhookCheck if you run itEPSS 0.33%Oct 2, 2026
- High7.1Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)Open the advisoryOct 2, 2026
- UnknownCVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker DistributionCheck if you run itEPSS 1.45%Oct 2, 2026
- UnknownCVE-2026-103958 is listed by CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS.Check if you run itEPSS 0.35%Oct 2, 2026
- UnknownCVE-2026-103957 is listed by CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS.Check if you run itEPSS 0.40%Oct 2, 2026
- UnknownCVE-2026-20273 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20272 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.57%Oct 2, 2026
- UnknownCVE-2026-20271 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
Sort