Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Commit 48a5fe38772b…Open the advisoryOct 18, 2026
- Low2.1A security vulnerability has been detected in WongKinYiu yolov9 0.1.Open the advisoryOct 18, 2026
- High8.8The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7…Check if you run itEPSS 0.57%Oct 16, 2026
- High7.2The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is…Check if you run itEPSS 0.24%Oct 16, 2026
- Medium6.8The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints.Check if you run itEPSS 9.00%Oct 16, 2026
- Medium5.3The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notif…Check if you run itEPSS 0.24%Oct 16, 2026
- High8.1Vulnity Security <= 1.4.3 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing CredentialsCheck if you run itEPSS 0.50%Oct 15, 2026
- UnknownMalicious code in xapi-lib (npm)Open the advisoryOct 15, 2026
- UnknownMalicious code in idlive-face-capture-web-development (npm)Open the advisoryOct 15, 2026
- Unknownnginx-1.31.7-1.1 on GA mediaOpen the advisoryOct 15, 2026
- UnknownNginx UI: OTP secure-session step-up can be bypassed via MCP configuration toolsCheck if you run itEPSS 0.35%Oct 15, 2026
- UnknownNginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enableCheck if you run itEPSS 0.21%Oct 15, 2026
- UnknownNginx UI: MCP Bypasses Directive Validation — Authenticated RCECheck if you run itEPSS 0.62%Oct 15, 2026
- UnknownNginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)Check if you run itEPSS 0.38%Oct 15, 2026
- UnknownNginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)Check if you run itEPSS 0.40%Oct 15, 2026
- UnknownNginx UI: Account Takeover via Missing on User Management EndpointCheck if you run itEPSS 0.33%Oct 15, 2026
- Medium5.9The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len = len - KW41Z_FCS_LEN…Check if you run itEPSS 0.23%Oct 14, 2026
- High8.3Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rCheck if you run itEPSS 0.18%Oct 14, 2026
- UnknownCVE-2026-97205 affecting package nginx 1.30.4-1Open the advisoryOct 14, 2026
- Critical9.2A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return direct…Check if you run itEPSS 0.52%Oct 14, 2026
- High8.7Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAutCheck if you run itEPSS 0.36%Oct 14, 2026
- High8.3Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the builtCheck if you run itEPSS 0.20%Oct 14, 2026
- Medium6.9Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanuCheck if you run itEPSS 0.32%Oct 14, 2026
- Medium6.9NGINX ngx_http_v3_module vulnerabilityCheck if you run itEPSS 0.25%Oct 14, 2026
- High8.7An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the policy or Ingress external authentication.Check if you run itEPSS 0.39%Oct 14, 2026
287 records · page 1 of 12
PreviousNext