Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.72%Sep 22, 2026
- Medium4.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.59%Sep 22, 2026
- Medium5.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.24%Sep 22, 2026
- High7.5CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.90%Sep 22, 2026
- High7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.61%Sep 22, 2026
- High7.5A flaw was found in rpcbind.Check if you run itEPSS 0.43%Sep 22, 2026
- Medium6.5The BM Content Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to 3.17.1 (exclusive) via the ux_cb_page_customize_save_layout_ajax() function.Check if you run itEPSS 0.53%Sep 22, 2026
- Medium5.3The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.23%Sep 22, 2026
- Medium5.3The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.23%Sep 22, 2026
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.06%Sep 22, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 75.87%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 39.98%Sep 22, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.43%Sep 22, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.39%Sep 22, 2026
- Medium5.3The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead_get_nonce() in subsys/secure_storage/src/its/t…Check if you run itEPSS 0.06%Sep 21, 2026
- UnknownMalicious code in gemini-computer-use (npm)Open the advisorySep 21, 2026
- High7.5A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit breakers for microservices.Check if you run itEPSS 0.63%Sep 21, 2026
- Medium5.3A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support.Check if you run itEPSS 0.95%Sep 21, 2026
- High8.6UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege…Check if you run itEPSS 0.44%Sep 21, 2026
- Medium5.3UVdesk core-framework before 1.1.7 contains an authorization bypass vulnerability in the saved reply endpoint that allows authenticated agents to access replies restri…Check if you run itEPSS 0.30%Sep 21, 2026
- Medium5.1UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfig…Check if you run itEPSS 0.18%Sep 21, 2026
- Low2.1A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX.Check if you run itEPSS 0.45%Sep 21, 2026
- Low2.1A vulnerability was found in ST Engineering iDirect iDX and Evo iDX.Check if you run itEPSS 0.43%Sep 21, 2026
- Critical9.1UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Pr…Check if you run itEPSS 0.34%Sep 21, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.42%Sep 21, 2026