Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2When Jetty's make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).Check if you run itEPSS 0.32%Oct 15, 2026
- High8.2In Eclipse Jetty, HttpClient may receive a redirect of the form: If an attacker is able to control the redirects, then HttpClient matches authentication credentials ag…Check if you run itEPSS 0.28%Oct 15, 2026
- Medium6.9In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context.Check if you run itEPSS 0.27%Oct 15, 2026
- UnknownMalicious code in py-worm (PyPI)Open the advisoryOct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in b…Check if you run itEPSS 0.32%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound Q…Check if you run itEPSS 0.28%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison l…Check if you run itEPSS 0.40%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads int…Check if you run itEPSS 0.32%Oct 15, 2026
- UnknownMalicious code in py-sock2 (PyPI)Open the advisoryOct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field f…Check if you run itEPSS 0.32%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array fo…Check if you run itEPSS 0.26%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecod…Check if you run itEPSS 0.28%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Check if you run itEPSS 0.28%Oct 15, 2026
- Critical9.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handli…Check if you run itEPSS 0.42%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length d…Check if you run itEPSS 0.21%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered byte…Check if you run itEPSS 0.26%Oct 15, 2026
- High8.7Allocation of Resources Without Limits or ThrottlingCheck if you run itEPSS 0.26%Oct 15, 2026
- Medium6.0Improper certificate validation in Cato Client tunnel handshakeCheck if you run itEPSS 0.08%Oct 15, 2026
- Critical9.8Critical: idm:DL1 security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- Medium6.1Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'Check if you run itEPSS 0.21%Oct 15, 2026
- Medium6.1Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' ParameterCheck if you run itEPSS 0.21%Oct 15, 2026
- Medium5.0Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project.Check if you run itEPSS 0.10%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- High7.7FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared moduleCheck if you run itEPSS 0.23%Oct 15, 2026
- Medium6.5SFTPGo: Denial of service via malformed SSH channel requestCheck if you run itEPSS 0.31%Oct 15, 2026