Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Traefik is an open source HTTP reverse proxy and load balancer.Check if you run itEPSS 0.31%Sep 22, 2026
- High7.7A flaw was found in libstdc++.Check if you run itEPSS 0.44%Sep 22, 2026
- Medium5.4Out of bounds read in PICT image importCheck if you run itEPSS 0.15%Sep 22, 2026
- Medium6.7Package URLs can be used to exfiltrate arbitrary INI file values and environment variablesCheck if you run itEPSS 0.14%Sep 22, 2026
- Medium5.4Stack buffer overflow in CFF to Type 1 font conversionCheck if you run itEPSS 0.19%Sep 22, 2026
- Medium5.4Stack buffer overflow in CFF font hint handlingCheck if you run itEPSS 0.19%Sep 22, 2026
- Medium5.4Heap buffer overflow in WMF text record importCheck if you run itEPSS 0.20%Sep 22, 2026
- Critical9.6Red Hat Security Advisory: webkit2gtk3 security updateOpen the advisorySep 22, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisorySep 22, 2026
- UnknownCUPS: Schwachstelle ermöglicht PrivilegieneskalationOpen the advisorySep 22, 2026
- High8.8The BM Content Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ux_cb_remove_layout_ajax() and ux_…Check if you run itEPSS 0.90%Sep 22, 2026
- Medium6.5The BM Content Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to 3.17.1 (exclusive) via the ux_cb_page_customize_save_layout_ajax() function.Check if you run itEPSS 0.79%Sep 22, 2026
- Medium5.3The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.32%Sep 22, 2026
- Medium5.3The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.32%Sep 22, 2026
- Medium5.3The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.32%Sep 22, 2026
- High7.2ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution VulnerabilityCheck if you run itEPSS 0.48%Sep 22, 2026
- Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 24.94%Sep 22, 2026
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.38%Sep 22, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 91.61%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 95.77%Sep 22, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.43%Sep 22, 2026
- Unknownpixelite events_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Sep 22, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.39%Sep 22, 2026
- Medium5.3The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead_get_nonce() in subsys/secure_storage/src/its/t…Check if you run itEPSS 0.08%Sep 21, 2026
- UnknownMalicious code in gemini-computer-use (npm)Open the advisorySep 21, 2026
Sort