Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging…Check if you run itEPSS 0.88%Oct 14, 2026
- High8.5DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images.Check if you run itEPSS 0.20%Oct 14, 2026
- Medium6.8L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files.Check if you run itEPSS 0.24%Oct 14, 2026
- High7.5Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module).Check if you run itEPSS 0.39%Oct 14, 2026
- High8.6Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerabilit…Check if you run itEPSS 0.42%Oct 14, 2026
- High7.2Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).Check if you run itEPSS 0.49%Oct 14, 2026
- High7.3Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.17%Oct 14, 2026
- High7.5Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.40%Oct 14, 2026
- High7.5Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.31%Oct 14, 2026
- High7.5Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module).Check if you run itEPSS 0.21%Oct 14, 2026
- Critical9.0Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component.Check if you run itEPSS 0.28%Oct 14, 2026
- High7.5Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).Check if you run itEPSS 0.41%Oct 14, 2026
- High7.5Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).Check if you run itEPSS 0.40%Oct 14, 2026
- High8.1Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).Check if you run itEPSS 0.46%Oct 14, 2026
- High8.8Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.56%Oct 14, 2026
- High8.8Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.14%Oct 14, 2026
- Medium4.8vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 DecoderCheck if you run itEPSS 0.17%Oct 14, 2026
- High8.7Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAutCheck if you run itEPSS 0.36%Oct 14, 2026
- High8.3Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the builtCheck if you run itEPSS 0.20%Oct 14, 2026
- Medium6.9Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanuCheck if you run itEPSS 0.32%Oct 14, 2026
- Medium6.9NGINX ngx_http_v3_module vulnerabilityCheck if you run itEPSS 0.25%Oct 14, 2026
- High8.7An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the policy or Ingress external authentication.Check if you run itEPSS 0.39%Oct 14, 2026
- High7.1Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent.Check if you run itEPSS 0.26%Oct 14, 2026
- High8.8Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unCheck if you run itEPSS 0.48%Oct 14, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.Check if you run itEPSS 0.44%Oct 14, 2026