Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-98432 affecting package kernel 6.6.157.1-1Open the advisoryOct 15, 2026
- UnknownMalicious code in xapi-lib (npm)Open the advisoryOct 15, 2026
- High7.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.34%Oct 15, 2026
- UnknownIn versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.27%Oct 15, 2026
- Criticalipv4: free inet_opt and ireq_opt after an RCU grace periodCheck if you run itEPSS 0.17%Oct 15, 2026
- UnknownMalicious code in idlive-face-capture-web-development (npm)Open the advisoryOct 15, 2026
- MediumAn attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is curren…Check if you run itEPSS 0.26%Oct 15, 2026
- Medium6.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.19%Oct 15, 2026
- Critical9.3An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path.Check if you run itEPSS 0.54%Oct 15, 2026
- Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.43%Oct 15, 2026
- Medium6.9On request the script creates a world-readable debug log in /var/log/sdbootutil.log.Check if you run itEPSS 0.11%Oct 15, 2026
- High8.2When Jetty's make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).Check if you run itEPSS 0.32%Oct 15, 2026
- Medium6.9In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context.Check if you run itEPSS 0.27%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Check if you run itEPSS 0.28%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered byte…Check if you run itEPSS 0.26%Oct 15, 2026
- High7.0The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest.Check if you run itEPSS 0.12%Oct 15, 2026
- Critical9.8Critical: idm:DL1 security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- Medium5.3eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template UpdateCheck if you run itEPSS 0.22%Oct 15, 2026
- Medium6.1ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure VulnerabilityOpen the advisoryOct 15, 2026
- High7.3PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' ParameterCheck if you run itEPSS 0.24%Oct 15, 2026
- Critical9.5In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific…Check if you run itEPSS 0.23%Oct 15, 2026
- High7.1In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length…Check if you run itEPSS 0.17%Oct 15, 2026
- Critical9.8Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query build…Check if you run itEPSS 0.30%Oct 15, 2026
- Medium5.0Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project.Check if you run itEPSS 0.10%Oct 15, 2026
- High8.7IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodeCheck if you run itEPSS 0.39%Oct 15, 2026