Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBusCheck if you run itEPSS 0.10%Oct 16, 2026
- High7.8Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBusOpen the advisoryOct 16, 2026
- High8.7libp2p-rust is the official Rust language implementation of the libp2p networking stack.Open the advisoryOct 16, 2026
- High7.2SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families.Open the advisoryOct 16, 2026
- Medium5.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.22%Oct 16, 2026
- High7.5pupnp is an SDK for development of UPnP device and control point applications.Open the advisoryOct 16, 2026
- High7.1pupnp is an SDK for development of UPnP device and control point applications.Check if you run itEPSS 0.32%Oct 16, 2026
- High7.5pupnp is an SDK for development of UPnP device and control point applications.Open the advisoryOct 16, 2026
- Medium6.5CVE-2026-55862Check if you run itEPSS 0.38%Oct 16, 2026
- High7.5libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session.Open the advisoryOct 16, 2026
- High7.5axios: Axios affected by Denial of Service via __proto__ Key in mergeConfigCheck if you run itEPSS 1.99%Oct 16, 2026
- High8.0@remix-run/router: react-router: React Router vulnerable to XSS via Open RedirectsCheck if you run itEPSS 0.87%Oct 16, 2026
- High7.4crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumptionCheck if you run itEPSS 0.92%Oct 16, 2026
- High7.5golang: net/url: Memory exhaustion in query parameter parsing in net/urlCheck if you run itEPSS 2.33%Oct 16, 2026
- Critical9.0countly-server is the server-side part of Countly, a product analytics solution.Check this weekEPSS 34.00%Oct 16, 2026
- High7.5CGA-xgp3-pg3w-f4mcOpen the advisoryOct 16, 2026
- High8.8An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external content.Open the advisoryOct 16, 2026
- Medium6.5libtirpc: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decodingCheck if you run itEPSS 0.30%Oct 16, 2026
- Medium5.3A flaw was found in libtirpc.Check if you run itEPSS 0.23%Oct 16, 2026
- Medium4.3Tutor LMS <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover via 'ID' ParameterCheck if you run itEPSS 0.20%Oct 16, 2026
- Medium6.4xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' ParameterCheck if you run itEPSS 0.20%Oct 16, 2026
- Medium4.9Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' ParameterCheck if you run itEPSS 0.77%Oct 16, 2026
- High8.1User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart TagCheck if you run itEPSS 0.37%Oct 16, 2026
- Medium4.3User Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action()Check if you run itEPSS 0.15%Oct 16, 2026
- High7.2User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field ValueCheck if you run itEPSS 0.23%Oct 16, 2026