Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-20353 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.40%Oct 14, 2026
- Medium6.6CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)Check if you run itEPSS 0.33%Oct 14, 2026
- Medium4.6CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)Check if you run itEPSS 0.32%Oct 14, 2026
- High7.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.48%Oct 14, 2026
- High7.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.48%Oct 14, 2026
- High7.7Discourse is an open-source discussion platform.Check if you run itEPSS 0.43%Oct 14, 2026
- Medium4.3Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component.Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownCVE-2026-97205 affecting package nginx 1.30.4-1Open the advisoryOct 14, 2026
- Medium5.9Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository…Check if you run itEPSS 0.29%Oct 14, 2026
- High8.1Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account.Check if you run itEPSS 0.24%Oct 14, 2026
- High8.8Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled.Check if you run itEPSS 0.20%Oct 14, 2026
- High8.8Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event.Check if you run itEPSS 0.22%Oct 14, 2026
- High8.8Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier.Check if you run itEPSS 0.20%Oct 14, 2026
- Medium4.3Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API.Check if you run itEPSS 0.37%Oct 14, 2026
- Medium5.4Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes.Check if you run itEPSS 0.29%Oct 14, 2026
- Medium4.3Gitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their web equivalents.Check if you run itEPSS 0.40%Oct 14, 2026
- Medium4.3Gitea's API and web issue-search paths do not treat restricted accounts as anonymous viewers when evaluating Limited-visibility repository owners.Check if you run itEPSS 0.40%Oct 14, 2026
- Medium6.5For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or path filters exclude execution.Check if you run itEPSS 0.26%Oct 14, 2026
- Medium6.5Gitea's Swift package parser limits each manifest to 128 KiB but does not limit the number of manifests or their aggregate size before reading them into memory.Check if you run itEPSS 0.55%Oct 14, 2026
- Medium6.5Gitea parses Alpine package uploads before enforcing package-size quotas and does not bound the decompressed .PKGINFO data or its dependency and provides entry counts.Check if you run itEPSS 0.55%Oct 14, 2026
- Medium6.5Gitea's OneDev migration downloader reads the entire remote version response into memory without a size limit and uses a client without a timeout.Check if you run itEPSS 0.55%Oct 14, 2026
- Low3.5Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in…Check if you run itEPSS 0.37%Oct 14, 2026
- Critical9.8Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files.Patch nowKEVEPSS 28.31%Oct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.13%Oct 14, 2026
- UnknownCVE-2026-53613 affecting package util-linux 2.40.2-6Open the advisoryOct 14, 2026