Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-53939 affecting package cjose 0.6.2.2-7Open the advisorySep 9, 2026
- UnknownCVE-2026-53938 affecting package cjose 0.6.2.2-7Open the advisorySep 9, 2026
- UnknownInitialization of a Resource with an Insecure DefaultPatch nowKEVEPSS 1.08%Sep 9, 2026
- UnknownN-able N-central Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 1.25%Sep 9, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 2.91%Sep 9, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.44%Sep 9, 2026
- Critical9.1Red Hat Enterprise Linux (cjose): Schwachstelle ermöglicht Manipulation von DatenCheck if you run itEPSS 0.24%Sep 8, 2026
- High8.2Red Hat Enterprise Linux (cjose): Schwachstelle ermöglicht Denial of Service und Manipulation von DatenCheck if you run itEPSS 0.24%Sep 8, 2026
- Low3.3A flaw was found in DPDK lib/vhost.Check if you run itEPSS 0.14%Sep 8, 2026
- Highsharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545Check if you run itEPSS 0.24%Sep 8, 2026
- UnknownCVE-2026-7809Open the advisorySep 8, 2026
- High8.8A memory corruption vulnerability exists in FFmpeg before 8.1.Check if you run itEPSS 0.52%Sep 8, 2026
- HighCakePHP: SmtpTransport vulnerable to CRLF header injectionCheck if you run itEPSS 0.54%Sep 8, 2026
- HighCakePHP: SmtpTransport vulnerable to CRLF header injectionCheck if you run itEPSS 0.45%Sep 8, 2026
- High7.0Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Sep 8, 2026
- High8.8Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.80%Sep 8, 2026
- Medium5.8SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViewsCheck if you run itEPSS 0.33%Sep 8, 2026
- UnknownCVE-2026-82514Open the advisorySep 8, 2026
- High7.8Xbox Gaming Services Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.31%Sep 8, 2026
- High8.6Microsoft Authenticator Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.53%Sep 8, 2026
- High7.5Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionCheck if you run itEPSS 1.85%Sep 8, 2026
- High8.5A flaw was found in libxml2 with Python bindings enabled.Check if you run itEPSS 0.66%Sep 8, 2026
- Medium5.1A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.Check if you run itEPSS 0.14%Sep 8, 2026
- Medium5.4An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges.Check if you run itEPSS 0.36%Sep 8, 2026
- High7.5Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0Check if you run itEPSS 0.17%Sep 8, 2026
Sort