Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Tornado before 6.4.1 HTTP Request Smuggling via Transfer-EncodingCheck if you run itEPSS 0.36%Sep 15, 2026
- Critical9.0Tornado before 6.3.3 HTTP Request Smuggling via Content-LengthCheck if you run itEPSS 0.38%Sep 15, 2026
- Medium6.5NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module.Check if you run itEPSS 0.26%Sep 15, 2026
- Low3.7The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received dur…Check if you run itEPSS 0.27%Sep 15, 2026
- UnknownA vulnerability has been found in luben zstd-jni up to 1.5.7-13.Check if you run itEPSS 0.54%Sep 15, 2026
- High7.8CGA-xwh6-gq46-gvmvOpen the advisorySep 15, 2026
- UnknownUse of Hard-coded Cryptographic KeyPatch nowKEVEPSS 2.70%Sep 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 0.23%Sep 15, 2026
- UnknownContent-Encoding WAF EvasionCheck if you run itEPSS 0.31%Sep 15, 2026
- High8.8Google Pixel Improper Authorization VulnerabilityPatch nowKEVEPSS 0.63%Sep 15, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.69%Sep 15, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 1.20%Sep 15, 2026
- High7.8A use after free issue was addressed with improved memory management.Check if you run itEPSS 0.17%Sep 14, 2026
- Critical9.8An out-of-bounds write issue was addressed with improved bounds checking.Check if you run itEPSS 1.28%Sep 14, 2026
- Critical9.1The issue was addressed with improved memory handling.Check if you run itEPSS 0.74%Sep 14, 2026
- Critical9.8A double free issue was addressed with improved memory management.Check if you run itEPSS 0.68%Sep 14, 2026
- Critical9.1A certificate validation issue was addressed with improved certificate validation.Check if you run itEPSS 0.40%Sep 14, 2026
- UnknownIn CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link.Check if you run itEPSS 0.19%Sep 14, 2026
- High8.6CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity CenterCheck if you run itEPSS 0.69%Sep 14, 2026
- UnknownCVE-2026-84445 affecting package podman 5.6.1-10Open the advisorySep 14, 2026
- UnknownCVE-2026-84445 affecting package kata-containers-preview 3.27.0~preview2-2Open the advisorySep 14, 2026
- UnknownCVE-2026-84445 affecting package cri-o 1.30.1-1Open the advisorySep 14, 2026
- UnknownCVE-2026-84445 affecting package buildah 1.43.1-3Open the advisorySep 14, 2026
- UnknownCVE-2026-84445 affecting package azl-otel-collector 0.127.0-1Open the advisorySep 14, 2026
- MediumAn NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlle…Check if you run itEPSS 0.43%Sep 14, 2026
Sort