Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was found in ST Engineering iDirect iDX and Evo iDX.Check if you run itEPSS 0.43%Sep 21, 2026
- Critical9.1UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Pr…Check if you run itEPSS 0.34%Sep 21, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.42%Sep 21, 2026
- UnknownThemefic ultimate_addons_for_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.11%Sep 21, 2026
- UnknownFlowiseAI Flowise Use of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.66%Sep 21, 2026
- UnknownImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 1.16%Sep 21, 2026
- High7.5Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted.Check if you run itEPSS 0.40%Sep 19, 2026
- Medium6.1A flaw was found in the Quarkus Qute template engine.Check if you run itEPSS 0.54%Sep 18, 2026
- Medium5.5A flaw was found in cockpit-machines.Check if you run itEPSS 0.17%Sep 18, 2026
- High7.4PJSIP is a free and open source multimedia communication library written in C.Check if you run itEPSS 0.23%Sep 18, 2026
- High8.7http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleCheck if you run itEPSS 0.57%Sep 18, 2026
- High7.5c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chainsCheck if you run itEPSS 0.48%Sep 18, 2026
- Medium5.3c-ares: Memory-amplification denial of service via unvalidated DNS header record countsCheck if you run itEPSS 0.47%Sep 18, 2026
- Critical9.9XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).Check if you run itEPSS 0.64%Sep 18, 2026
- Medium5.9IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using…Check if you run itEPSS 0.16%Sep 18, 2026
- Medium4.3IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in fur…Check if you run itEPSS 0.21%Sep 18, 2026
- Medium4.3IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.Check if you run itEPSS 0.26%Sep 18, 2026
- Medium5.9IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by ins…Check if you run itEPSS 0.17%Sep 18, 2026
- Medium6.5IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.Check if you run itEPSS 0.27%Sep 18, 2026
- High7.5IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.46%Sep 18, 2026
- UnknownCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service VulnerabilityCheck if you run itEPSS 0.55%Sep 18, 2026
- Medium6.5A flaw was found in Netty's HTTP/1.1 decoder.Check if you run itEPSS 0.90%Sep 18, 2026
- High7.5A flaw was found in Netty RtspDecoder.Check if you run itEPSS 0.77%Sep 18, 2026
- Medium4.2A flaw was found in EAP's Elytron.Check if you run itEPSS 0.28%Sep 18, 2026
- Medium5.3IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error m…Check if you run itEPSS 0.24%Sep 18, 2026