Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSecurity update for tinyproxyOpen the advisoryOct 19, 2026
- Medium6.4Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches…Open the advisoryOct 19, 2026
- High8.2An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data…Open the advisoryOct 19, 2026
- High7.8Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail se…Open the advisoryOct 19, 2026
- High7.5Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying mail.Open the advisoryOct 19, 2026
- Medium6.5Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6) of Progressive Robot hMailServer allows…Open the advisoryOct 19, 2026
- High7.5Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write…Open the advisoryOct 19, 2026
- Medium6.5Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0 through 6.3.6) of Progressive Robot hMa…Open the advisoryOct 19, 2026
- UnknownSecurity update for puttyOpen the advisoryOct 19, 2026
- UnknownSecurity update for libxlsOpen the advisoryOct 19, 2026
- UnknownREJECTED: CVE-2026-98654: drm/amd/display: Atomize IRQ register read/modify/write opsOpen the advisoryOct 19, 2026
- UnknownREJECTED: CVE-2026-90050: net/sched: fq: clamp quantum and initial_quantum in change pathOpen the advisoryOct 19, 2026
- UnknownREJECTED: CVE-2026-90052: dm-integrity: fix buffer overflow with keyed discardOpen the advisoryOct 19, 2026
- UnknownREJECTED: CVE-2026-98165: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs onlyOpen the advisoryOct 19, 2026
- Unknownphp8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilitiesOpen the advisoryOct 19, 2026
- High7.4A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS).Open the advisoryOct 19, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component.Open the advisoryOct 19, 2026
- Medium6.5A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly.Open the advisoryOct 19, 2026
- Critical9.9Bit-packing in Cranelift compiler causes silent overflow and miscompilationOpen the advisoryOct 19, 2026
- Critical9.9Cranelift backend on aarch64 can jump to incorrect target on large Wasm instructionOpen the advisoryOct 19, 2026
- UnknownPanic lowering a host-created component model stream into a guest that expects a different payload typeOpen the advisoryOct 19, 2026
- Low3.7p3: forwarded trailers aren't checked against hookOpen the advisoryOct 19, 2026
- Low3.7: Guests can add conflicting content lengths to messagesOpen the advisoryOct 19, 2026
- Medium5.3p3: Guests can set incorrect content-length for spliced response bodiesOpen the advisoryOct 19, 2026
- UnknownDistrust compromised intermediate certificates in crypto/x509Open the advisoryOct 19, 2026