Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownA vulnerability was determined in Blosc C-Blosc2 up to 3.3.2.Check if you run itEPSS 0.28%Sep 30, 2026
- High7.6PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.Open the advisorySep 30, 2026
- UnknownCVE-2026-103111 affecting package rust for versions less than 1.75.0-30Open the advisorySep 30, 2026
- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityCheck if you run itEPSS 0.37%Sep 30, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityPatch nowKEVEPSS 1.82%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityPatch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.55%Sep 30, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.46%Sep 30, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.45%Sep 30, 2026
- UnknownImportant: nodejs:24 security, bug fix, and enhancement updateOpen the advisorySep 30, 2026
- High8.7anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking.Open the advisorySep 29, 2026
- Medium5.9adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different contentOpen the advisorySep 29, 2026
- Medium5.3adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() pathOpen the advisorySep 29, 2026
- Medium5.9The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition.Open the advisorySep 29, 2026
- High8.2A flaw was found in libsoup.Check if you run itEPSS 0.37%Sep 29, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)Check if you run itEPSS 0.38%Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationCheck if you run itEPSS 0.31%Sep 29, 2026
- Medium6.3ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c.Check if you run itEPSS 0.32%Sep 29, 2026
- Medium5.9libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.Check if you run itEPSS 0.35%Sep 29, 2026
- Unknownurllib3 is an HTTP client library for Python.Check if you run itEPSS 0.29%Sep 29, 2026
- High8.6A flaw was found in libsoup.Check if you run itEPSS 0.27%Sep 29, 2026
- Medium6.8NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface…Check if you run itEPSS 0.15%Sep 29, 2026
- UnknownImproper parsing of fractional NumericDate from JWT exp claimsOpen the advisorySep 29, 2026
- High8.1Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.Check if you run itEPSS 0.10%Sep 29, 2026
- Medium6.5Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability.Check if you run itEPSS 0.20%Sep 29, 2026