Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSecurity update for chromiumOpen the advisoryAug 1, 2026
- Unknownwpmanageninja ninja_tables Embedded Malicious CodePatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodePatch nowKEVEPSS 0.67%Aug 1, 2026
- UnknownAdobe ColdFusion Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.95%Aug 1, 2026
- High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 7.88%Aug 1, 2026
- High7.5Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit.Check if you run itEPSS 0.52%Jul 31, 2026
- Medium6.5SuiteCRM 7 — Record-level Authorization Bypass via AOR_Reports changeReportPageOpen the advisoryJul 31, 2026
- Medium6.5IDOR in generatePdf Entry Point Allows Record Data ExfiltrationOpen the advisoryJul 31, 2026
- High8.3SQL injection via id param in modules/Campaigns/PopupCampaignRoi.phpOpen the advisoryJul 31, 2026
- High8.3Authenticated SQL Injection in get_end_date function in Project ControllerOpen the advisoryJul 31, 2026
- High8.1Incorrect Access Control in V8 relationship creation via missing edit authorizationOpen the advisoryJul 31, 2026
- High7.7isSelfRequest() bypass via substring match allows SSRF to internal servicesOpen the advisoryJul 31, 2026
- High8.3SQL injection via parameter_value[0] param in AOR_Report.phpOpen the advisoryJul 31, 2026
- High7.5A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.66%Jul 31, 2026
- Low3.8Stores can mix up type indices between enginesCheck if you run itEPSS 0.09%Jul 31, 2026
- UnknownRufRoot: The MCP Bridge Vulnerability That Turns Agents Into Rogue Admins (CVE-2026-59726) - Noma SecurityCheck if you run itEPSS 3.02%Jul 31, 2026
- High7.5A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.Check if you run itEPSS 0.49%Jul 31, 2026
- High8.6A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.Check if you run itEPSS 2.51%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabCheck if you run itEPSS 0.64%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.Check if you run itEPSS 0.64%Jul 31, 2026
- Critical9.2A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabCheck if you run itEPSS 0.64%Jul 31, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVJul 31, 2026
- Critical9.8Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.Check if you run itEPSS 0.39%Jul 30, 2026
- Medium5.5Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissionsCheck if you run itEPSS 0.11%Jul 30, 2026
- Medium6.2Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tamperingCheck if you run itEPSS 0.25%Jul 30, 2026
Sort