Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.37%Oct 14, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.69%Oct 14, 2026
- Medium6.5Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.41%Oct 14, 2026
- Medium6.5Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool.Check if you run itEPSS 0.42%Oct 14, 2026
- Critical9.2Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is usedCheck if you run itEPSS 0.74%Oct 14, 2026
- UnknownCVE-2026-76443 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.53%Oct 14, 2026
- UnknownCVE-2026-76442 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.47%Oct 14, 2026
- UnknownCVE-2026-76441 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.53%Oct 14, 2026
- UnknownCVE-2026-76440 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.62%Oct 14, 2026
- UnknownCVE-2026-20353 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.40%Oct 14, 2026
- Medium6.6CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)Check if you run itEPSS 0.33%Oct 14, 2026
- Medium4.6CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)Check if you run itEPSS 0.32%Oct 14, 2026
- High7.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.48%Oct 14, 2026
- High7.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.48%Oct 14, 2026
- High7.7Discourse is an open-source discussion platform.Check if you run itEPSS 0.43%Oct 14, 2026
- Medium4.3Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component.Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownCVE-2026-97205 affecting package nginx 1.30.4-1Open the advisoryOct 14, 2026
- Medium5.9Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository…Check if you run itEPSS 0.29%Oct 14, 2026
- High8.1Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account.Check if you run itEPSS 0.24%Oct 14, 2026
- High8.8Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled.Check if you run itEPSS 0.20%Oct 14, 2026
- High8.8Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event.Check if you run itEPSS 0.22%Oct 14, 2026
- High8.8Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier.Check if you run itEPSS 0.20%Oct 14, 2026
- Medium4.3Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API.Check if you run itEPSS 0.37%Oct 14, 2026
- Medium5.4Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes.Check if you run itEPSS 0.29%Oct 14, 2026
- Medium4.3Gitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their web equivalents.Check if you run itEPSS 0.40%Oct 14, 2026