Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.Check if you run itEPSS 0.66%Oct 14, 2026
- High8.2A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to ca…Check if you run itEPSS 0.33%Oct 14, 2026
- High8.7A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service…Check if you run itEPSS 0.57%Oct 14, 2026
- Critical9.3An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authenti…Check if you run itEPSS 0.58%Oct 14, 2026
- Medium5.3YOURLS is a self-hosted, customizable URL shortener written in PHP.Check if you run itEPSS 0.47%Oct 14, 2026
- Medium6.9Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host s…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.2TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs…Check if you run itEPSS 0.44%Oct 14, 2026
- Medium6.9Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordings_path viaCheck if you run itEPSS 0.46%Oct 14, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.69%Oct 14, 2026
- Medium6.5Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.41%Oct 14, 2026
- High7.1Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabledCheck if you run itEPSS 0.41%Oct 14, 2026
- Low1.1CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)Check if you run itEPSS 0.11%Oct 14, 2026
- Medium5.9Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository…Check if you run itEPSS 0.29%Oct 14, 2026
- Medium5.3When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint dur…Check if you run itEPSS 0.17%Oct 14, 2026
- High8.1Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account.Check if you run itEPSS 0.24%Oct 14, 2026
- High8.8Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event.Check if you run itEPSS 0.22%Oct 14, 2026
- Medium4.3Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-only restriction on the token authenticating the request.Check if you run itEPSS 0.29%Oct 14, 2026
- Medium4.3Gitea's repository markup endpoint resolves same-repository pull request references without enforcing the viewer's Pull Requests permission.Check if you run itEPSS 0.29%Oct 14, 2026
- Medium6.5Gitea's shared comparison helper omits the token repository-access check used when updating pull requests.Check if you run itEPSS 0.34%Oct 14, 2026
- Medium5.4Gitea's repository migration API accepts a public-only token when the request specifies creation of a private repository.Check if you run itEPSS 0.38%Oct 14, 2026
- Medium4.3Gitea's activity-feed and contribution-heatmap API handlers do not apply the profile visibility check for restricted accounts viewing Limited-visibility users.Check if you run itEPSS 0.37%Oct 14, 2026
- Medium6.5For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or path filters exclude execution.Check if you run itEPSS 0.26%Oct 14, 2026
- Medium4.3Gitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility restriction enforced…Check if you run itEPSS 0.37%Oct 14, 2026
- Medium5.3Gitea's collaborative-owner authorization path for reading cross-repository reusable workflows does not exclude fork pull request runs.Check if you run itEPSS 0.43%Oct 14, 2026
- Medium6.5Gitea's Swift package parser limits each manifest to 128 KiB but does not limit the number of manifests or their aggregate size before reading them into memory.Check if you run itEPSS 0.55%Oct 14, 2026