Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSecurity update for python-PyJWTOpen the advisoryOct 9, 2026
- Critical9.1Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCo…Check if you run itEPSS 0.19%Oct 9, 2026
- High8.1Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain mul…Check if you run itEPSS 0.32%Oct 9, 2026
- High7.5By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document.Check if you run itEPSS 0.46%Oct 9, 2026
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…Check if you run itEPSS 0.20%Oct 9, 2026
- High7.5In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attac…Check if you run itEPSS 0.56%Oct 9, 2026
- High7.2Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability.Check if you run itEPSS 0.30%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026
- High8.2Reusing a Nonce, Key Pair in EncryptionCheck if you run itEPSS 0.41%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.18%Oct 9, 2026
- High8.2Uncontrolled RecursionCheck if you run itEPSS 0.39%Oct 9, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 9, 2026
- Unknownbpf: Skip unsettled links in link iteratorCheck if you run itEPSS 0.16%Oct 9, 2026
- Unknownvlan: require the MAC header to be present in __vlan_insert_inner_tag()Check if you run itEPSS 0.16%Oct 9, 2026
- Unknownxen/netfront: drop RX packets with a short Ethernet headerCheck if you run itEPSS 0.18%Oct 9, 2026
- UnknownAsh.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sortsCheck if you run itEPSS 0.27%Oct 9, 2026
- Low2.3An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the r…Check if you run itEPSS 0.14%Oct 9, 2026
- Critical9.2An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to e…Check if you run itEPSS 0.48%Oct 9, 2026
- High8.8A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker wh…Check if you run itEPSS 0.43%Oct 9, 2026
- Medium5.5OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.Open the advisoryOct 9, 2026
- Medium5.5OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has bee…Check if you run itEPSS 0.10%Oct 9, 2026
- Medium6.5OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management.Open the advisoryOct 9, 2026
- Medium5.5OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().Open the advisoryOct 9, 2026
- Criticaltheme-fusion avada_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.43%Oct 9, 2026