Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9ShortPixel image_optimizer Deserialization of Untrusted DataPatch nowKEVEPSS 0.21%Sep 24, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.89%Sep 24, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.59%Sep 24, 2026
- High7.5A flaw was found in the OpenShift console.Check if you run itEPSS 0.53%Sep 23, 2026
- UnknownCVE-2026-57854Open the advisorySep 23, 2026
- UnknownCVE-2026-53979Open the advisorySep 23, 2026
- UnknownCVE-2026-53978Open the advisorySep 23, 2026
- UnknownCVE-2026-53969Open the advisorySep 23, 2026
- Critical9.1RabbitMQ: Trust-store whitelist by Issuer+Serial onlyCheck if you run itEPSS 0.23%Sep 23, 2026
- High8.2RabbitMQ: Web-MQTT decompression bombCheck if you run itEPSS 0.39%Sep 23, 2026
- High7.1RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated sizeCheck if you run itEPSS 0.30%Sep 23, 2026
- High7.2A flaw was found in the Ansible Automation Platform automation controller.Check if you run itEPSS 0.80%Sep 23, 2026
- Medium6.4A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend.Check if you run itEPSS 0.29%Sep 23, 2026
- Medium6.5A flaw was found in the automation-controller notification subsystem.Check if you run itEPSS 0.44%Sep 23, 2026
- Critical9.2RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetchCheck if you run itEPSS 0.20%Sep 23, 2026
- High7.3RabbitMQ: Stored XSS via TLS peer-certificate DN in management UICheck if you run itEPSS 0.15%Sep 23, 2026
- High8.2RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoSCheck if you run itEPSS 0.32%Sep 23, 2026
- High7.6RabbitMQ: CORS * reflects Origin with Allow-CredentialsCheck if you run itEPSS 0.37%Sep 23, 2026
- High7.1RabbitMQ: Atom-table exhaustion via reply-to queue name decodingCheck if you run itEPSS 0.33%Sep 23, 2026
- UnknownVU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlersCheck if you run itEPSS 0.24%Sep 23, 2026
- High7.5A denial-of-service flaw was found in gnome-remote-desktop.Check if you run itEPSS 0.91%Sep 23, 2026
- High8.5CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() performs no object-level RBAC.Check if you run itEPSS 0.41%Sep 23, 2026
- Medium4.3HostList.list() catches bare Exception and returns str(e) verbatim.Check if you run itEPSS 0.36%Sep 23, 2026
- UnknownVU#273940: Enterprise Access Management EAM does not rotate RSA keysCheck if you run itEPSS 0.14%Sep 23, 2026
- Critical9.8SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requestsCheck if you run itEPSS 0.74%Sep 23, 2026
Sort