Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loopCheck if you run itEPSS 0.35%Aug 31, 2026
- High8.8A flaw was found in WebKitGTK.Check if you run itEPSS 0.50%Aug 31, 2026
- High7.0A flaw was found in GDB's STABS debug format parser.Check if you run itEPSS 0.13%Aug 31, 2026
- Medium6.5URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprepCheck if you run itEPSS 0.23%Aug 31, 2026
- High7.5A flaw was found in RESTEasy's SourceProvider.Check if you run itEPSS 0.82%Aug 31, 2026
- High7.5A flaw was found in SmallRye GraphQL.Check if you run itEPSS 0.79%Aug 31, 2026
- High8.8A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails.Check if you run itEPSS 0.97%Aug 31, 2026
- High8.7Red Hat Security Advisory: kernel security, bug fix, and enhancement updateOpen the advisoryAug 31, 2026
- Medium6.9nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments.Check if you run itEPSS 0.42%Aug 31, 2026
- Critical9.3Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter.Check if you run itEPSS 1.98%Aug 31, 2026
- High7.8ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityOpen the advisoryAug 31, 2026
- High7.8ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOpen the advisoryAug 31, 2026
- High7.8ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityOpen the advisoryAug 31, 2026
- High7.8ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOpen the advisoryAug 31, 2026
- High7.8ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution VulnerabilityOpen the advisoryAug 31, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Aug 31, 2026
- Unknownpixelite events_manager Improper Privilege ManagementPatch nowKEVEPSS 0.50%Aug 31, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.53%Aug 31, 2026
- Critical9.1Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.42%Aug 29, 2026
- High7.5free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.42%Aug 28, 2026
- Medium4.3Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.79%Aug 28, 2026
- Medium6.5External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.92%Aug 28, 2026
- Medium5.4Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.41%Aug 28, 2026
- Medium5.4Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.39%Aug 28, 2026
- Low3.0Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose…Check if you run itEPSS 0.29%Aug 28, 2026
Sort