Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Apple Multiple Products Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 1.24%Sep 28, 2026
- High7.1Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.14%Sep 27, 2026
- Medium5.1Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.Check if you run itEPSS 0.16%Sep 27, 2026
- High8.5Edgelesssys Contrast is a confidential-computing runtime for Kubernetes.Check if you run itEPSS 0.21%Sep 27, 2026
- Medium6.9Contrast is a Kubernetes runtime for confidential containers.Check if you run itEPSS 0.07%Sep 27, 2026
- Critical9.5Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming…Check if you run itEPSS 0.47%Sep 26, 2026
- High8.3Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-typ…Check if you run itEPSS 0.26%Sep 26, 2026
- High8.3vLLM is an inference and serving engine for large language models.Check if you run itEPSS 0.27%Sep 26, 2026
- Unknownis unmaintainedOpen the advisorySep 26, 2026
- UnknownCVE-2026-100419 affecting package rust for versions less than 1.75.0-30Open the advisorySep 25, 2026
- UnknownCVE-2026-18320 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Check if you run itEPSS 0.16%Sep 25, 2026
- UnknownCVE-2026-18312 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Check if you run itEPSS 0.19%Sep 25, 2026
- UnknownCVE-2026-18311 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Check if you run itEPSS 0.16%Sep 25, 2026
- High8.2RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoSCheck if you run itEPSS 0.42%Sep 25, 2026
- High8.2RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /loginCheck if you run itEPSS 0.14%Sep 25, 2026
- High8.8IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limi…Check if you run itEPSS 0.58%Sep 25, 2026
- High8.8IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format.Check if you run itEPSS 0.24%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail after a lower-devi…Check if you run itEPSS 0.11%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If map_addr() change…Check if you run itEPSS 0.11%Sep 25, 2026
- Unknown[20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatchCheck if you run itEPSS 0.27%Sep 25, 2026
- Unknown[20260908] - Core - XSS in HTML Mail TemplatesCheck if you run itEPSS 0.20%Sep 25, 2026
- High8.8D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint.Check if you run itEPSS 1.29%Sep 25, 2026
- Medium5.5smb/server: fix tree connection leak in smb2_tree_connect()Check if you run itEPSS 0.11%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the l…Check if you run itEPSS 0.11%Sep 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no r…Check if you run itEPSS 0.14%Sep 25, 2026