Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSecurity update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)Open the advisoryOct 6, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.41%Oct 6, 2026
- Unknownwpclever wpc_product_bundles_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.40%Oct 6, 2026
- UnknownImportant: nodejs:22 security updateOpen the advisoryOct 6, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionCheck if you run itEPSS 0.13%Oct 5, 2026
- Medium5.4Filament: Multi-factor authentication (app) management actions do not require password reauthenticationOpen the advisoryOct 5, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresCheck if you run itEPSS 0.27%Oct 5, 2026
- Medium6.5Snowflake drivers writes sensitive information to logsCheck if you run itEPSS 0.09%Oct 5, 2026
- Medium5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.45%Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- Medium6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0Check if you run itEPSS 0.27%Oct 5, 2026
- Medium6.9Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4Check if you run itEPSS 0.29%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0Check if you run itEPSS 0.10%Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)Open the advisoryOct 5, 2026
- Medium6.7In venc, there is a possible out of bounds write due to type confusion.Open the advisoryOct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to a missing bounds check.Open the advisoryOct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to type confusion.Open the advisoryOct 5, 2026
- Medium6.7In vdec, there is a possible out of bounds write due to type confusion.Open the advisoryOct 5, 2026
- UnknownD-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.06%Oct 5, 2026
- UnknownD-Link dap-1650_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 7.29%Oct 5, 2026