Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.23%Oct 2, 2026
- High8.7In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with the top b…Check if you run itEPSS 0.42%Oct 2, 2026
- High8.7Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.32%Oct 2, 2026
- High8.7Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.52%Oct 2, 2026
- High8.2Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.23%Oct 2, 2026
- High8.2Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.29%Oct 2, 2026
- High8.7Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.36%Oct 2, 2026
- Critical9.1Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.33%Oct 2, 2026
- Medium6.5StellarWP the_events_calendar Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.22%Oct 2, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.49%Oct 2, 2026
- UnknownGitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1Check this weekEPSS 17.49%Oct 2, 2026
- Unknowngeminilabs site_reviews Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 2, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.04%Oct 2, 2026
- UnknownMelapress wp_activity_log Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.59%Oct 2, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.36%Oct 2, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Oct 2, 2026
- High7.6Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by sup…Check if you run itEPSS 0.29%Oct 1, 2026
- High8.4Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an…Check if you run itEPSS 0.13%Oct 1, 2026
- UnknownCVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)Check if you run itEPSS 0.31%Oct 1, 2026
- UnknownCVE-2026-63724Open the advisoryOct 1, 2026
- UnknownCVE-2026-63721Open the advisoryOct 1, 2026
- UnknownCVE-2023-54404Check if you run itEPSS 0.35%Oct 1, 2026
- UnknownCVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scanCheck if you run itEPSS 0.14%Oct 1, 2026
- High8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a dirCheck if you run itEPSS 0.43%Oct 1, 2026
Sort