Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation VulnerabilityOpen the advisorySep 16, 2026
- High7.2ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure VulnerabilityCheck if you run itEPSS 0.33%Sep 16, 2026
- High7.8ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.24%Sep 16, 2026
- High8.8ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.62%Sep 16, 2026
- High8.8ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution VulnerabilityCheck if you run itEPSS 0.70%Sep 16, 2026
- High8.8ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution VulnerabilityCheck if you run itEPSS 0.46%Sep 16, 2026
- Medium6.1ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation VulnerabilityCheck if you run itEPSS 0.31%Sep 16, 2026
- High7.7ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityCheck if you run itEPSS 0.41%Sep 16, 2026
- High7.7ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityCheck if you run itEPSS 0.41%Sep 16, 2026
- High7.8ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.43%Sep 16, 2026
- High8.1ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.89%Sep 16, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 75.60%Sep 16, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownCrocoblock jetformbuilder Incorrect Privilege AssignmentPatch nowKEVEPSS 0.24%Sep 16, 2026
- UnknownImproper Certificate ValidationPatch nowKEVEPSS 5.00%Sep 16, 2026
- Medium5.5A flaw was found in Podman.Check if you run itEPSS 0.44%Sep 15, 2026
- UnknownHCSEC-2026-39 - Go-getter vulnerable to a privilege escalation issue in its archive decompression handlingCheck if you run itEPSS 0.11%Sep 15, 2026
- High7.5An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connec…Check if you run itEPSS 0.53%Sep 15, 2026
- Medium4.5A flaw was found in the buildah/copier Go package.Check if you run itEPSS 0.41%Sep 15, 2026
- High8.5Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 i…Check if you run itEPSS 0.19%Sep 15, 2026
- High7.3A flaw was found in environment-modules.Check if you run itEPSS 0.23%Sep 15, 2026
- High7.0CGA-26f2-c5ww-5g8pOpen the advisorySep 15, 2026
- High7.0CGA-j6fp-5gwq-gcvrOpen the advisorySep 15, 2026
- High8.2Tornado before 6.5.7 Credential Leak via Handle ReuseCheck if you run itEPSS 0.24%Sep 15, 2026
- High8.7Tornado before 6.5.8 Memory Amplification DoS via multipartCheck if you run itEPSS 0.42%Sep 15, 2026
Sort