Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-97032 affecting package python-tensorboard 2.16.2-6Open the advisoryOct 8, 2026
- UnknownCVE-2026-97032 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- UnknownCVE-2026-94439 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package python-tensorboard 2.16.2-6Open the advisoryOct 8, 2026
- UnknownCVE-2026-78667 affecting package gcc 13.2.0-7Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package golang 1.26.7-1Open the advisoryOct 8, 2026
- High8.7TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443.Check if you run itEPSS 0.24%Oct 8, 2026
- High7.5HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently.Check if you run itEPSS 0.42%Oct 8, 2026
- Medium6.1When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.Check if you run itEPSS 0.20%Oct 8, 2026
- High7.8Checksum database bypass for golang.org/toolchain in cmd/goCheck if you run itEPSS 0.10%Oct 8, 2026
- High7.8Checksum bypass for golang.org/fips140 in cmd/goCheck if you run itEPSS 0.09%Oct 8, 2026
- UnknownMemory limit bypass when parsing MIME headers in net/textproto, mime/multipartCheck if you run itEPSS 0.40%Oct 8, 2026
- UnknownHTTP/1 server connection desynchronization after 2xx CONNECT response in net/httpCheck if you run itEPSS 0.32%Oct 8, 2026
- UnknownExcessive CPU consumption from repeated initial window changes in net/httpCheck if you run itEPSS 0.57%Oct 8, 2026
- UnknownLack of limit on size of parsed Range headers in net/httpCheck if you run itEPSS 0.38%Oct 8, 2026
- UnknownDouble flow control refund on HTTP/2 server streams in net/httpCheck if you run itEPSS 0.57%Oct 8, 2026
- HighHTTP/2 transport accepts malformed framing-related headers in net/httpCheck if you run itEPSS 0.30%Oct 8, 2026
- UnknownHTTP/2 server memory exhaustion due to Trailer headers in net/httpCheck if you run itEPSS 0.57%Oct 8, 2026
- HighHTTP/1 client connection desynchronization after CONNECT rejection in net/httpCheck if you run itEPSS 0.31%Oct 8, 2026
- Medium5.5IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.Check if you run itEPSS 0.16%Oct 8, 2026
- High7.5IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.Check if you run itEPSS 0.30%Oct 8, 2026
- High8.2Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql.Check if you run itEPSS 0.20%Oct 8, 2026
- Medium5.1jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalid…Check if you run itEPSS 0.21%Oct 8, 2026
- CriticalHazelcast allows arbitrary member memory access by low-privileged clientCheck if you run itEPSS 0.38%Oct 8, 2026