Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6Unauthenticated Adjacent Command Injection Vulnerability in AOS-10Open the advisoryOct 22, 2026
- Critical9.6Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code ExecutionOpen the advisoryOct 22, 2026
- Critical9.6Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code ExecutionOpen the advisoryOct 22, 2026
- Critical9.8Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10Open the advisoryOct 22, 2026
- Critical9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8Open the advisoryOct 22, 2026
- Critical9.8Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8Open the advisoryOct 22, 2026
- Critical9.8Unauthenticated Command Injection Vulnerability in AOS-8 PAPI ProtocolOpen the advisoryOct 22, 2026
- Critical9.8Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8Open the advisoryOct 22, 2026
- Critical9.8Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10Open the advisoryOct 22, 2026
- Critical9.8Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management InterfaceOpen the advisoryOct 22, 2026
- Critical10.0No description providedCheck if you run itEPSS 0.50%Oct 22, 2026
- Critical10.0No description providedCheck if you run itEPSS 0.40%Oct 22, 2026
- Critical10.0No description providedCheck if you run itEPSS 0.54%Oct 22, 2026
- Critical10.0No description providedCheck if you run itEPSS 0.54%Oct 22, 2026
- Critical9.5EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access.Check if you run itEPSS 0.43%Oct 22, 2026
- UnknownMissing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated n…Open the advisoryOct 22, 2026
- UnknownIncorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker t…Open the advisoryOct 22, 2026
- UnknownInsufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with delegate…Open the advisoryOct 22, 2026
- Medium6.3Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.Check if you run itEPSS 0.19%Oct 22, 2026
- High8.1Rsyslog is a rocket-fast system for log processing.Check if you run itEPSS 0.45%Oct 22, 2026
- Critical9.4Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.56%Oct 22, 2026
- Critical9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Check if you run itEPSS 0.39%Oct 21, 2026
- Medium6.8Red Hat Enterprise Linux ca-certificates: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenCheck if you run itEPSS 0.27%Oct 21, 2026
- High8.2Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparse…Check if you run itEPSS 0.26%Oct 21, 2026
- Medium6.9Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed (proxy.config.http.drop_chunked_trailers) until the connection time…Check if you run itEPSS 0.26%Oct 21, 2026