Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.2A vulnerability was determined in Zen Cart up to 2.2.2.Check if you run itEPSS 0.33%Oct 12, 2026
- UnknownInternal error terms inspected into AshTypescript RPC error responsesCheck if you run itEPSS 0.32%Oct 12, 2026
- Medium6.9A vulnerability was detected in Kamailio up to 6.0.7/6.1.3.Check if you run itEPSS 0.77%Oct 12, 2026
- Low2.1A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1.Check if you run itEPSS 0.27%Oct 12, 2026
- UnknownMalicious code in pyyi (PyPI)Open the advisoryOct 12, 2026
- UnknownMalicious code in minecraftaccfinder (PyPI)Open the advisoryOct 12, 2026
- Medium5.5A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6.Check if you run itEPSS 0.53%Oct 12, 2026
- Critical9.1Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed.Check if you run itEPSS 0.30%Oct 12, 2026
- Medium5.3The OTRS Agent Frontend configuration endpoint can be accessed without authentication.Check if you run itEPSS 0.28%Oct 12, 2026
- Medium6.8A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak.Check if you run itEPSS 0.25%Oct 12, 2026
- Medium6.1Insufficient Neutralization of Formula Elements in CSV ExportsCheck if you run itEPSS 0.19%Oct 12, 2026
- Medium5.4Duplicate Identity / Identity Shadowing across CustomerUser backendsCheck if you run itEPSS 0.16%Oct 12, 2026
- Medium4.3Cross-Site Request Forgery in Administrative ActionsCheck if you run itEPSS 0.14%Oct 12, 2026
- Medium5.5A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.Check if you run itEPSS 0.25%Oct 12, 2026
- Critical9.3A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03.Check if you run itEPSS 2.39%Oct 12, 2026
- Low2.0A weakness has been identified in y_project RuoYi up to 4.8.3.Check if you run itEPSS 0.20%Oct 12, 2026
- Medium5.4An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package.Check if you run itEPSS 0.15%Oct 12, 2026
- Medium4.8Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.Check if you run itEPSS 0.14%Oct 12, 2026
- Medium5.1Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.Check if you run itEPSS 0.15%Oct 12, 2026
- High7.2VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data.Check if you run itEPSS 0.11%Oct 12, 2026
- Low3.6ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the sa…Check if you run itEPSS 0.12%Oct 12, 2026
- Low1.9A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2.Check if you run itEPSS 0.11%Oct 12, 2026
- Low2.1A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5.Check if you run itEPSS 0.20%Oct 12, 2026
- Low2.1A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39.Check if you run itEPSS 0.19%Oct 12, 2026
- Low2.1A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39.Check if you run itEPSS 0.19%Oct 12, 2026