Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-13320 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.39%Jul 8, 2026
- UnknownCVE-2026-13151 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Open the advisoryJul 8, 2026
- UnknownCVE-2026-11827 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.44%Jul 8, 2026
- UnknownCVE-2025-12506 is listed by GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7.Check if you run itEPSS 0.33%Jul 8, 2026
- High7.7Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise in github.com/zhenorzz/goployCheck if you run itEPSS 0.35%Jul 7, 2026
- Critical9.6Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlersCheck if you run itEPSS 0.35%Jul 7, 2026
- Low2.7The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a di…Check if you run itEPSS 0.23%Jul 7, 2026
- Unknowncalibre is an e-book manager.Check if you run itEPSS 0.22%Jul 7, 2026
- UnknownGitHub - dhmosfunk/CVE-2026-49160-CVE-2026-47291-HTTP.sys: HTTP.sys Denial of Service Vulnerability & HTTP.sys Remote Code Execution Vulnerability · GitHubCheck this weekEPSS 56.59%Jul 7, 2026
- Low3.7A logic vulnerability was found in GStreamer's webrtcbin component.Check if you run itEPSS 0.23%Jul 7, 2026
- High8.8A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeploymen…Check if you run itEPSS 0.44%Jul 7, 2026
- High8.1Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0Check if you run itEPSS 0.40%Jul 7, 2026
- Medium6.5In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking.Check if you run itEPSS 0.66%Jul 7, 2026
- Medium6.5Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file.Check if you run itEPSS 0.60%Jul 7, 2026
- Medium6.5The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like and ) as synthetic config options whose option names were not i…Check if you run itEPSS 0.66%Jul 7, 2026
- Medium4.3A bug in Apache Airflow's scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs t…Check if you run itEPSS 0.64%Jul 7, 2026
- Medium6.5The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based check (which triggers on secret-suffixed key names li…Check if you run itEPSS 0.66%Jul 7, 2026
- High8.0A path traversal flaw was found in SSSD's AD GPO provider.Check if you run itEPSS 0.67%Jul 7, 2026
- High8.8A flaw was found in SSSD's LDAP sudo provider.Check if you run itEPSS 0.57%Jul 7, 2026
- High8.1Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement updateOpen the advisoryJul 7, 2026
- Critical9.8A bug in allowed unrestricted of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG toCheck if you run itEPSS 1.65%Jul 7, 2026
- UnknownCVE Record: CVE-2026-27180Check if you run itEPSS 1.20%Jul 7, 2026
- UnknownCVE Record: CVE-2026-26953Check if you run itEPSS 0.34%Jul 7, 2026
- UnknownCVE Record: CVE-2026-10796Check if you run itEPSS 5.00%Jul 7, 2026
- UnknownCVE Record: CVE-2026-1665Check if you run itEPSS 0.78%Jul 7, 2026
Sort