Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7In mtee, there is a possible escalation of privilege due to a missing bounds check.Check if you run itEPSS 0.11%Oct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- High8.8In vdec, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.39%Oct 5, 2026
- Medium6.7In vdec, there is a possible out of bounds write due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- Critical9.1maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-datCheck if you run itEPSS 0.20%Oct 5, 2026
- UnknownD-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.06%Oct 5, 2026
- UnknownArbitrary process termination from exposed minifilter communication portCheck if you run itEPSS 0.14%Oct 5, 2026
- UnknownD-Link dap-1650_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.29%Oct 5, 2026
- UnknownMalicious code in @kibt/www-nuxt-i18n (npm)Open the advisoryOct 4, 2026
- Critical9.1The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is passCheck if you run itEPSS 0.19%Oct 4, 2026
- Critical9.1go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS helper sets InsecureSkiCheck if you run itEPSS 0.19%Oct 4, 2026
- Critical10.0Ahsay AhsayCBS Command Injection VulnerabilityPatch nowKEVEPSS 81.76%Oct 4, 2026
- Medium6.9Ahsay AhsayCBS Improper Authentication VulnerabilityPatch nowKEVEPSS 79.47%Oct 4, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.35%Oct 4, 2026
- High8.8CGA-pm73-7p7w-x548Open the advisoryOct 3, 2026
- High8.6Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 3, 2026
- Medium6.4The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3…Check if you run itEPSS 0.18%Oct 3, 2026
- Low1.8ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an a…Check if you run itEPSS 0.11%Oct 3, 2026
- UnknownRejetto hfs2 Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 5.52%Oct 3, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issuePatch nowKEVEPSS 0.24%Oct 3, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 11.39%Oct 3, 2026
- Medium5.5Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret valuesCheck if you run itEPSS 0.23%Oct 2, 2026
- Critical10.0Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chainCheck if you run itEPSS 0.53%Oct 2, 2026
- High7.5Vibe-Trading file-read tools expose arbitrary server-readable filesCheck if you run itEPSS 0.43%Oct 2, 2026
- Critical10.0Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRFCheck if you run itEPSS 0.58%Oct 2, 2026
Sort