Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.39%Sep 30, 2026
- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 30, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 38.93%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityPatch nowKEVEPSS 10.94%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Session Fixation VulnerabilityPatch nowKEVEPSS 22.48%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Sep 30, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.45%Sep 30, 2026
- UnknownImportant: nodejs:24 security, bug fix, and enhancement updateOpen the advisorySep 30, 2026
- UnknownCVE-2026-15278Open the advisorySep 29, 2026
- High8.7anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking.Check if you run itEPSS 0.59%Sep 29, 2026
- Medium5.9adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different contentCheck if you run itEPSS 0.33%Sep 29, 2026
- Medium5.3adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() pathCheck if you run itEPSS 0.40%Sep 29, 2026
- UnknownCVE-2026-11415Open the advisorySep 29, 2026
- UnknownVLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives.Check if you run itEPSS 0.17%Sep 29, 2026
- Medium5.4Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last na…Check if you run itEPSS 0.26%Sep 29, 2026
- Critical9.8An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.Check if you run itEPSS 0.75%Sep 29, 2026
- High8.7Red Hat Enterprise Linux iperf3: Schwachstelle ermöglicht Denial of ServiceCheck if you run itEPSS 0.43%Sep 29, 2026
- Medium5.9The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition.Check if you run itEPSS 0.34%Sep 29, 2026
- High8.2A flaw was found in libsoup.Check if you run itEPSS 0.37%Sep 29, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)Check if you run itEPSS 0.24%Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationCheck if you run itEPSS 0.23%Sep 29, 2026
- Critical9.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.48%Sep 29, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.24%Sep 29, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.13%Sep 29, 2026
Sort