Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownGin is an administration theme that provides a modern, clean, and customizable backend UI for editors and site administrators.Open the advisoryOct 14, 2026
- Critical9.9KEDA is a Kubernetes-based Event Driven Autoscaling component.Check if you run itEPSS 0.64%Oct 14, 2026
- UnknownVU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationCheck if you run itEPSS 0.16%Oct 14, 2026
- Medium6.1CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.84%Oct 14, 2026
- Low1.1CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW)Check if you run itEPSS 0.27%Oct 14, 2026
- Medium5.9A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS.Check if you run itEPSS 0.10%Oct 14, 2026
- Medium6.1CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.83%Oct 14, 2026
- Medium6.5Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access.Check if you run itEPSS 0.19%Oct 14, 2026
- Medium5.3Gitea uses inconsistent repository visibility predicates, and the condition used by some repository-listing endpoints admits repositories whose owners are hidden from the viewer.Check if you run itEPSS 0.36%Oct 14, 2026
- Medium4.3Gitea's organization-list API does not enforce the read:organization token scope.Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.5Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdmin…Check if you run itEPSS 0.47%Oct 14, 2026
- High7.0VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestric…Check if you run itEPSS 0.64%Oct 14, 2026
- Low2.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val param…Check if you run itEPSS 0.36%Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter.Check if you run itEPSS 0.35%Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter.Check if you run itEPSS 0.39%Oct 14, 2026
- Medium6.3frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers…Check if you run itEPSS 0.78%Oct 14, 2026
- High7.1jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows authenticated low-privilege users to change oth…Check if you run itEPSS 0.44%Oct 14, 2026
- Critical9.3vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil.Check if you run itEPSS 1.00%Oct 14, 2026
- Medium6.9BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers…Check if you run itEPSS 0.64%Oct 14, 2026
- Critical9.2Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging…Check if you run itEPSS 0.88%Oct 14, 2026
- High8.8Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user th…Check if you run itEPSS 0.36%Oct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026