Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownfast-uri vulnerable to host confusion via backslash authority introducer · CVE-2026-18446 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.38%Aug 6, 2026
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 22.39%Aug 6, 2026
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 98.81%Aug 6, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 0.87%Aug 6, 2026
- High7.1Improper path validation in TUS uploads allows writing to arbitrary storage pathsOpen the advisoryAug 5, 2026
- Medium5.3Unauthenticated telemetry submission and settings write via pre-authorization side effects on the project owner endpointOpen the advisoryAug 5, 2026
- High8.1Missing Origin validation on WebSocket upgrades allows Cross-Site WebSocket HijackingOpen the advisoryAug 5, 2026
- Medium6.5Directus applies side effects in service overrides before permission checks, allowing unauthorized data modificationOpen the advisoryAug 5, 2026
- Medium5.4Stored cross-site scripting via unsanitized project color in the generated faviconOpen the advisoryAug 5, 2026
- High7.2SQL injection via geometry field type in PostgreSQL/PostGIS collection creationCheck if you run itEPSS 0.42%Aug 5, 2026
- High7.5Unthrottled system GraphQL resolvers allow anonymous DoS via alias amplificationOpen the advisoryAug 5, 2026
- CriticalDirectus public WebSocket clients gain unrestricted item access after a failed auth messageOpen the advisoryAug 5, 2026
- Medium5.1A flaw was found in libkcapi.Check if you run itEPSS 0.20%Aug 5, 2026
- High7.3Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel…Check if you run itEPSS 0.14%Aug 5, 2026
- Medium6.5A flaw was found in libkcapi.Check if you run itEPSS 0.34%Aug 5, 2026
- Medium6.5AOR Reports aor_fields.field SQL InjectionOpen the advisoryAug 5, 2026
- Medium6.5Authorization Bypass via Document Revision ID Confusion in download.phpOpen the advisoryAug 5, 2026
- High8.3Authenticated SQL Injection In Project ControllerOpen the advisoryAug 5, 2026
- High8.3SQL injection via search param in modules/Cases/controller.phpOpen the advisoryAug 5, 2026
- High8.3SQL injection via get_latest_for_id param in GetLatestRevision.phpOpen the advisoryAug 5, 2026
- High7.8xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()Check if you run itEPSS 0.13%Aug 5, 2026
- Unknownipv4: fib: free fib_alias with kfree_rcu() on insert error pathCheck if you run itEPSS 0.20%Aug 5, 2026
- UnknownRefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) | QualysCheck if you run itEPSS 0.47%Aug 5, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.52%Aug 5, 2026
- Unknownkaliforms contact_form_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.19%Aug 5, 2026
Sort