Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user th…Check if you run itEPSS 0.36%Oct 14, 2026
- High7.5An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service.Check if you run itEPSS 0.42%Oct 14, 2026
- UnknownSecurity update for containerdOpen the advisoryOct 14, 2026
- High8.7Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or una…Check if you run itEPSS 0.92%Oct 14, 2026
- Medium5.5A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.09%Oct 14, 2026
- High7.3Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security L…Check if you run itEPSS 0.27%Oct 14, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3.Check if you run itEPSS 0.42%Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.This issu…Check if you run itEPSS 0.20%Oct 14, 2026
- Unknownbind9 vulnerabilitiesOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for bindOpen the advisoryOct 14, 2026
- High7.5Important: python-tornado security updateOpen the advisoryOct 14, 2026
- High8.2Important: pcre2 security updateOpen the advisoryOct 14, 2026
- High7.8Important: kernel security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- High7.5Remote DoS through unchecked allocation in negentropyOpen the advisoryOct 14, 2026
- Medium5.3Stack overflow dropping a long chain of recursive typesOpen the advisoryOct 14, 2026
- UnknownFilesystem sandbox escape when renaming symlinks with trailing slashesOpen the advisoryOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionOpen the advisoryOct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 14, 2026
- Medium5.4The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notific…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the o…Check if you run itEPSS 0.15%Oct 14, 2026
- Medium5.3The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Comme…Check if you run itEPSS 0.14%Oct 14, 2026
- High8.7Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism.Check if you run itEPSS 0.47%Oct 14, 2026