Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerabilit…Check if you run itEPSS 0.42%Oct 14, 2026
- Critical9.0Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component.Check if you run itEPSS 0.28%Oct 14, 2026
- Medium4.8vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 DecoderCheck if you run itEPSS 0.17%Oct 14, 2026
- High8.3Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the builtCheck if you run itEPSS 0.20%Oct 14, 2026
- Medium6.9Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanuCheck if you run itEPSS 0.32%Oct 14, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.Check if you run itEPSS 0.44%Oct 14, 2026
- Critical9.2NGINX map directive and regex matching vulnerabilityCheck if you run itEPSS 0.55%Oct 14, 2026
- High8.8Gitea fork workflow approval bypass through review eventsCheck if you run itEPSS 0.49%Oct 14, 2026
- High8.1Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement.Check if you run itEPSS 0.43%Oct 14, 2026
- UnknownSecurity update for container-suseconnectOpen the advisoryOct 14, 2026
- UnknownSecurity update for helmOpen the advisoryOct 14, 2026
- UnknownCVE-2026-98426 affecting package kernel 6.6.157.1-1Open the advisoryOct 14, 2026
- UnknownCVE-2026-98422 affecting package kernel 6.6.157.1-1Open the advisoryOct 14, 2026
- UnknownCVE-2026-98410 affecting package kernel 6.6.157.1-1Open the advisoryOct 14, 2026
- UnknownCVE-2026-98406 affecting package kernel 6.6.157.1-1Open the advisoryOct 14, 2026
- UnknownCVE-2026-98398 affecting package kernel 6.6.157.1-1Open the advisoryOct 14, 2026
- UnknownCVE-2026-98394 affecting package kernel 6.6.157.1-1Open the advisoryOct 14, 2026
- Medium6.1Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium5.3Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability.Check if you run itEPSS 0.39%Oct 14, 2026
- Medium6.5Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.Check if you run itEPSS 0.58%Oct 14, 2026
- Medium6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Check if you run itEPSS 1.08%Oct 14, 2026
- Medium6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 1.08%Oct 14, 2026
- Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.Check if you run itEPSS 2.12%Oct 14, 2026
- Critical9.3pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths.Check if you run itEPSS 2.35%Oct 14, 2026
- Critical9.3Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_puCheck if you run itEPSS 0.72%Oct 14, 2026