Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- MediumA use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4.Check if you run itEPSS 0.14%Oct 17, 2026
- High7.5An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1.Check if you run itEPSS 0.49%Oct 17, 2026
- High8.1An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1.Check if you run itEPSS 0.39%Oct 17, 2026
- HighAn issue was discovered on Tektronix 3 Series MDO devices before 1.21.1.Check if you run itEPSS 0.86%Oct 17, 2026
- CriticalMage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.Check if you run itEPSS 0.37%Oct 17, 2026
- High7.5Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affe…Open the advisoryOct 17, 2026
- Medium5.3The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment st…Check if you run itEPSS 0.14%Oct 17, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Fancy Comments WordPress fancy-facebook-comments…Check if you run itEPSS 0.19%Oct 17, 2026
- MediumFossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing a…Check if you run itEPSS 0.21%Oct 17, 2026
- CriticalDockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp cl…Check if you run itEPSS 0.39%Oct 17, 2026
- LowA flaw has been found in LMCache up to 0.5.4.Check if you run itEPSS 0.08%Oct 17, 2026
- UnknownMalicious code in itsa-react-maskedinput (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in itsa-react-focuscontainer (npm)Open the advisoryOct 16, 2026
- UnknownCVE-2026-17591 affecting package libarchive 3.7.7-7Open the advisoryOct 16, 2026
- UnknownCVE-2026-17591 affecting package cmake 3.30.3-15Open the advisoryOct 16, 2026
- UnknownCVE-2026-110755 affecting package perl-Text-CSV_XS 1.60-1Open the advisoryOct 16, 2026
- Medium5.9Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statdCheck if you run itEPSS 0.31%Oct 16, 2026
- High8.1OpenHuman is an open-source agent harness available as a desktop application and Rust library.Open the advisoryOct 16, 2026
- High7.1Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering.Open the advisoryOct 16, 2026
- Critical9.8Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parseCheck if you run itEPSS 0.19%Oct 16, 2026
- High7.5Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespaceCheck if you run itEPSS 0.19%Oct 16, 2026
- Critical9.8Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combineCheck if you run itEPSS 0.19%Oct 16, 2026
- Critical9.8Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in printCheck if you run itEPSS 0.19%Oct 16, 2026
- High7.5Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getlineCheck if you run itEPSS 0.19%Oct 16, 2026
- Medium6.5Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline.Check if you run itEPSS 0.19%Oct 16, 2026