Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.16%Oct 13, 2026
- High7.1OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser.Check if you run itEPSS 0.13%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditio…Check if you run itEPSS 0.18%Oct 13, 2026
- Low1.9A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4.Check if you run itEPSS 0.11%Oct 13, 2026
- Low2.1A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8.Check if you run itEPSS 0.27%Oct 13, 2026
- Low2.1A vulnerability has been found in code-projects Online Reviewer System 1.0.Check if you run itEPSS 0.27%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,…Check if you run itEPSS 0.18%Oct 13, 2026
- Low2.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.21%Oct 13, 2026
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.19%Oct 13, 2026
- High8.8SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query.Check if you run itEPSS 0.35%Oct 13, 2026
- Critical10.0The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications.Check if you run itEPSS 0.27%Oct 13, 2026
- Critical9.9SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality.Check if you run itEPSS 0.31%Oct 13, 2026
- Critical9.9SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scri…Check if you run itEPSS 0.37%Oct 13, 2026
- Critical9.8The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.Check if you run itEPSS 0.37%Oct 13, 2026
- Medium4.8A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2.Check if you run itEPSS 0.14%Oct 13, 2026
- Low2.4A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041.Check if you run itEPSS 0.12%Oct 13, 2026
- Low1.9A weakness has been identified in ModelTC LightX2V up to 0.5.0.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.Check if you run itEPSS 0.19%Oct 13, 2026
- High8.1IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.Check if you run itEPSS 0.48%Oct 13, 2026
- Medium5.9The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium5.7The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.8The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one…Check if you run itEPSS 0.14%Oct 13, 2026