Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39.Check if you run itEPSS 0.19%Oct 12, 2026
- Low2.1A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39.Check if you run itEPSS 0.30%Oct 12, 2026
- CriticalCVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLabCheck if you run itEPSS 0.55%Oct 12, 2026
- High8.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.27%Oct 12, 2026
- Medium5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.22%Oct 12, 2026
- Medium5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.22%Oct 12, 2026
- Medium5.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could havCheck if you run itEPSS 0.23%Oct 12, 2026
- High8.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.22%Oct 12, 2026
- Medium5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.22%Oct 12, 2026
- High8.2GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed aCheck if you run itEPSS 0.25%Oct 12, 2026
- UnknownLangflow Langflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.59%Oct 12, 2026
- Medium6.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveCheck if you run itEPSS 0.16%Oct 12, 2026
- Medium4.6GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configuratiCheck if you run itEPSS 0.09%Oct 12, 2026
- UnknownImportant: kernel security updateOpen the advisoryOct 12, 2026
- High7.8The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData().Check if you run itEPSS 0.11%Oct 11, 2026
- High7.8The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c declared two variab…Check if you run itEPSS 0.12%Oct 11, 2026
- Medium6.8The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK…Check if you run itEPSS 0.17%Oct 11, 2026
- Low3.4The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion.Check if you run itEPSS 0.11%Oct 11, 2026
- Medium5.3Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs.Check if you run itEPSS 0.28%Oct 11, 2026
- High7.2pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members t…Check if you run itEPSS 0.38%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any authenticated user to rea…Open the advisoryOct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated users to del…Check if you run itEPSS 0.21%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any authenticated user to delete…Open the advisoryOct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint that allows any authenticated user to modify lo…Check if you run itEPSS 0.19%Oct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows authenticated users to read other users' AI ch…Open the advisoryOct 11, 2026