Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component.Open the advisoryOct 19, 2026
- Critical9.8Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon.Open the advisoryOct 19, 2026
- Medium4.3Missing Authorization vulnerability in Apache Answer.Open the advisoryOct 19, 2026
- High8.1Insertion of Sensitive Information into Log File vulnerability in Apache Answer.Open the advisoryOct 19, 2026
- Critical10.0Deserialization of Untrusted Data vulnerability in Apache Camel.Check if you run itEPSS 0.00%Oct 19, 2026
- Medium5.3MISP contains a vulnerability in the handling of module plugin settings.Check if you run itEPSS 0.00%Oct 19, 2026
- High7.1MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted.Check if you run itEPSS 0.00%Oct 19, 2026
- Medium4.8MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface.Check if you run itEPSS 0.00%Oct 19, 2026
- Medium6.9VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references.Open the advisoryOct 19, 2026
- Medium4.8MISP contains a CSS injection vulnerability in the remote event preview feature.Check if you run itEPSS 0.00%Oct 19, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a throughCheck if you run itEPSS 0.00%Oct 19, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.TCheck if you run itEPSS 0.00%Oct 19, 2026
- Medium5.1MISP contains a data integrity flaw in its event deletion logic.Check if you run itEPSS 0.00%Oct 19, 2026
- Medium5.3In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push.Check this weekEPSS 31.00%Oct 19, 2026
- High7.1MISP contains an access control flaw in the proposal (shadow attribute) visibility logic.Check this weekEPSS 23.00%Oct 19, 2026
- High8.8SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/ap_LCheck this weekEPSS 23.00%Oct 19, 2026
- High8.5MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity.Check if you run itEPSS 7.00%Oct 19, 2026
- High7.2A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute a…Open the advisoryOct 19, 2026
- High7.4A flaw was found in bootc and ostree.Open the advisoryOct 19, 2026
- UnknownCVE-2026-16487Open the advisoryOct 19, 2026
- UnknownMalicious code in fabtoolkit (PyPI)Open the advisoryOct 19, 2026
- Critical9.3Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in mcp_service.go) and OIDC registratCheck if you run itEPSS 0.00%Oct 19, 2026
- Critical9.3Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go) in GoogleCheck if you run itEPSS 0.00%Oct 19, 2026
- High7.5A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .Open the advisoryOct 19, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable reference on init error path nft_flow_offload_init() bumps the flowtOpen the advisoryOct 19, 2026