Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Important: python-tornado security updateOpen the advisoryOct 14, 2026
- High8.2Important: pcre2 security updateOpen the advisoryOct 14, 2026
- High7.8Important: kernel security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- High7.5Remote DoS through unchecked allocation in negentropyOpen the advisoryOct 14, 2026
- Medium5.3Stack overflow dropping a long chain of recursive typesOpen the advisoryOct 14, 2026
- UnknownFilesystem sandbox escape when renaming symlinks with trailing slashesOpen the advisoryOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionOpen the advisoryOct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 14, 2026
- Medium5.4The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notific…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the o…Check if you run itEPSS 0.15%Oct 14, 2026
- Medium5.3The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Comme…Check if you run itEPSS 0.14%Oct 14, 2026
- High8.7Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism.Check if you run itEPSS 0.47%Oct 14, 2026
- High8.7A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources pr…Check if you run itEPSS 0.45%Oct 14, 2026
- High8.8The insights-runtime-extractor runs as a privileged DaemonSet ( ) that scans container processes for runtime fingerprinting.Check if you run itEPSS 0.17%Oct 14, 2026
- High7.5Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allow…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.5The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is e…Check if you run itEPSS 0.14%Oct 14, 2026
- Medium4.6HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)Check if you run itEPSS 0.18%Oct 14, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.12%Oct 14, 2026
- Medium6.1A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux).Check if you run itEPSS 0.15%Oct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownPublished: 2026-09-28 Description Description Severity Notes A Confused Deputy vulnerability was discovered in the Email Task component in Application Integration vers…Check if you run itEPSS 0.32%Oct 14, 2026
- UnknownPublished: 2026-08-11 Description Description Severity Notes A vulnerability (CVE-2026-6726, also known as TCGVRT0010) has been identified in the Trusted Computing Gro…Check if you run itEPSS 0.19%Oct 14, 2026
- UnknownCVE-2026-53492 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Check if you run itEPSS 0.35%Oct 14, 2026