Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.71%Oct 9, 2026
- High8.0MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.76%Oct 9, 2026
- High8.8Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URLCheck if you run itEPSS 1.55%Oct 9, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 9, 2026
- Low2.3An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the r…Check if you run itEPSS 0.14%Oct 9, 2026
- High7.5music-metadata is a metadata parser for audio and video media files.Check if you run itEPSS 0.29%Oct 8, 2026
- Medium4.8FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when…Check if you run itEPSS 0.14%Oct 8, 2026
- High8.5An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an aut…Check if you run itEPSS 1.46%Oct 8, 2026
- Medium5.4An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS…Check if you run itEPSS 3.10%Oct 8, 2026
- Medium5.4An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.61%Oct 8, 2026
- High7.0Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings.Check if you run itEPSS 0.25%Oct 8, 2026
- High7.3An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.66%Oct 8, 2026
- High8.6An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 2.57%Oct 8, 2026
- Medium5.3An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.18%Oct 8, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query text an…Check if you run itEPSS 0.20%Oct 7, 2026
- Medium6.5In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job i…Check if you run itEPSS 0.22%Oct 7, 2026
- HighLangflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersCheck if you run itEPSS 0.25%Oct 7, 2026
- High8.1ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len without first ch…Check if you run itEPSS 0.21%Oct 7, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%Oct 6, 2026
- HighRabbitMQ: Incomplete fix for CVE-2026-44838: does not escape , leaving room for an MQTT topic permission bypassCheck if you run itEPSS 0.23%Oct 1, 2026
- Medium6.3ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c.Check if you run itEPSS 0.32%Sep 29, 2026
- Medium5.1Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.Check if you run itEPSS 0.16%Sep 27, 2026
- Medium6.9Contrast is a Kubernetes runtime for confidential containers.Check if you run itEPSS 0.07%Sep 27, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation Sashiko reported that the…Check if you run itEPSS 0.17%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: bpf: Preserve inner map identity in callback frames Callback frame constructors initialize map-type…Check if you run itEPSS 0.17%Sep 25, 2026