Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.Check if you run itEPSS 0.16%Sep 11, 2026
- Low3.5The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it,…Check if you run itEPSS 0.24%Sep 11, 2026
- Low3.3In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.Check if you run itEPSS 0.16%Sep 11, 2026
- High7.8In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context.Check if you run itEPSS 0.13%Sep 11, 2026
- Medium6.5PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.Check if you run itEPSS 0.27%Sep 11, 2026
- Medium6.5PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.Check if you run itEPSS 0.25%Sep 11, 2026
- High7.4PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.Check if you run itEPSS 0.35%Sep 11, 2026
- Medium5.9PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.Check if you run itEPSS 0.29%Sep 11, 2026
- UnknownCVE-2026-89092 affecting package glibc 2.38-21Open the advisorySep 11, 2026
- UnknownCVE-2026-78134 affecting package strongswan for versions less than 5.9.14-11Open the advisorySep 11, 2026
- UnknownCVE-2026-78131 affecting package strongswan for versions less than 5.9.14-11Open the advisorySep 11, 2026
- UnknownCVE-2026-78130 affecting package strongswan for versions less than 5.9.14-11Open the advisorySep 11, 2026
- UnknownCVE-2026-78129 affecting package strongswan for versions less than 5.9.14-11Open the advisorySep 11, 2026
- UnknownCVE-2026-78123 affecting package strongswan for versions less than 5.9.14-11Open the advisorySep 11, 2026
- UnknownCVE-2026-78124 affecting package strongswan for versions less than 5.9.14-11Open the advisorySep 11, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 97.36%Sep 11, 2026
- Unknownvitejs vite Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.10%Sep 11, 2026
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisorySep 10, 2026
- High7.5An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets.Check if you run itEPSS 0.43%Sep 10, 2026
- High7.8A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled font index.Check if you run itEPSS 0.17%Sep 10, 2026
- UnknownHCSEC-2026-38 - Consul-template vulnerable to an information disclosure issue in error handlingCheck if you run itEPSS 0.38%Sep 10, 2026
- UnknownHCSEC-2026-37 - Consul vulnerable to an authorization bypass in the Connect service meshCheck if you run itEPSS 0.34%Sep 10, 2026
- UnknownHCSEC-2026-36 - Consul vulnerable to an authorization bypass in the catalog deregistration pathCheck if you run itEPSS 0.31%Sep 10, 2026
- UnknownHCSEC-2026-35 - Consul vulnerable to a denial of service in the native RPC listenerCheck if you run itEPSS 0.41%Sep 10, 2026
- UnknownHCSEC-2026-34 - Consul vulnerable to an authorization bypass in the catalog node-write pathCheck if you run itEPSS 0.37%Sep 10, 2026
Sort