Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to d…Check if you run itEPSS 0.22%Oct 19, 2026
- Medium6.5Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO request is initiated.Check if you run itEPSS 0.15%Oct 19, 2026
- High8.2The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store.Check if you run itEPSS 0.18%Oct 19, 2026
- Low2.7The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code.Check if you run itEPSS 0.28%Oct 19, 2026
- Medium4.3russh: Unbounded memory allocation in agent protocol server via crafted constraint recordsOpen the advisoryOct 19, 2026
- LowA russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the requestOpen the advisoryOct 19, 2026
- Critical10.0Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassCheck if you run itEPSS 0.00%Oct 19, 2026
- UnknownRecommended update for sequoia-sqOpen the advisoryOct 19, 2026
- UnknownRecommended update for cadvisorOpen the advisoryOct 19, 2026
- UnknownSecurity update for python-joserfcOpen the advisoryOct 19, 2026
- UnknownSecurity update for grafanaOpen the advisoryOct 19, 2026
- UnknownSecurity update for corednsOpen the advisoryOct 19, 2026
- UnknownSecurity update for gitoxideOpen the advisoryOct 19, 2026
- UnknownSecurity update for grok-buildOpen the advisoryOct 19, 2026
- UnknownSecurity update for tinyproxyOpen the advisoryOct 19, 2026
- Medium6.4Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches…Open the advisoryOct 19, 2026
- High8.2An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data…Open the advisoryOct 19, 2026
- High7.8Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail se…Open the advisoryOct 19, 2026
- High7.5Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying mail.Open the advisoryOct 19, 2026
- Medium6.5Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6) of Progressive Robot hMailServer allows…Open the advisoryOct 19, 2026
- High7.5Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write…Open the advisoryOct 19, 2026
- Medium6.5Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0 through 6.3.6) of Progressive Robot hMa…Open the advisoryOct 19, 2026
- UnknownSecurity update for puttyOpen the advisoryOct 19, 2026
- UnknownSecurity update for libxlsOpen the advisoryOct 19, 2026
- UnknownREJECTED: CVE-2026-98654: drm/amd/display: Atomize IRQ register read/modify/write opsOpen the advisoryOct 19, 2026