Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language I…Open the advisoryOct 19, 2026
- High7.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component.Open the advisoryOct 19, 2026
- High7.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component.Open the advisoryOct 19, 2026
- High7.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component.Open the advisoryOct 19, 2026
- High7.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component.Open the advisoryOct 19, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component.Open the advisoryOct 19, 2026
- Critical9.8Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon.Open the advisoryOct 19, 2026
- Medium4.3Missing Authorization vulnerability in Apache Answer.Open the advisoryOct 19, 2026
- High8.1Insertion of Sensitive Information into Log File vulnerability in Apache Answer.Open the advisoryOct 19, 2026
- Critical10.0Deserialization of Untrusted Data vulnerability in Apache Camel.Check if you run itEPSS 0.00%Oct 19, 2026
- Medium5.3MISP contains a vulnerability in the handling of module plugin settings.Check if you run itEPSS 0.00%Oct 19, 2026
- High7.1MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted.Check if you run itEPSS 0.00%Oct 19, 2026
- Medium4.8MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface.Check if you run itEPSS 0.00%Oct 19, 2026
- Medium6.9VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references.Open the advisoryOct 19, 2026
- Medium4.8MISP contains a CSS injection vulnerability in the remote event preview feature.Check if you run itEPSS 0.00%Oct 19, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a throughCheck if you run itEPSS 0.00%Oct 19, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.TCheck if you run itEPSS 0.00%Oct 19, 2026
- Medium5.1MISP contains a data integrity flaw in its event deletion logic.Check if you run itEPSS 0.00%Oct 19, 2026
- Medium5.3In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push.Check this weekEPSS 31.00%Oct 19, 2026
- High7.1MISP contains an access control flaw in the proposal (shadow attribute) visibility logic.Check this weekEPSS 23.00%Oct 19, 2026
- High8.8SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/ap_LCheck this weekEPSS 23.00%Oct 19, 2026
- High8.5MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity.Check if you run itEPSS 7.00%Oct 19, 2026
- High7.2A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute a…Open the advisoryOct 19, 2026
- High7.4A flaw was found in bootc and ostree.Open the advisoryOct 19, 2026
- UnknownCVE-2026-16487Open the advisoryOct 19, 2026