Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A flaw was found in cockpit-machines.Check if you run itEPSS 0.17%Sep 18, 2026
- High7.4PJSIP is a free and open source multimedia communication library written in C.Check if you run itEPSS 0.23%Sep 18, 2026
- High8.7http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleCheck if you run itEPSS 0.57%Sep 18, 2026
- High7.5c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chainsCheck if you run itEPSS 0.48%Sep 18, 2026
- Medium5.3c-ares: Memory-amplification denial of service via unvalidated DNS header record countsCheck if you run itEPSS 0.47%Sep 18, 2026
- Critical9.9XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).Check if you run itEPSS 0.64%Sep 18, 2026
- Medium5.9IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using…Check if you run itEPSS 0.16%Sep 18, 2026
- Medium4.3IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in fur…Check if you run itEPSS 0.21%Sep 18, 2026
- Medium4.3IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.Check if you run itEPSS 0.26%Sep 18, 2026
- Medium5.9IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by ins…Check if you run itEPSS 0.17%Sep 18, 2026
- Medium6.5IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.Check if you run itEPSS 0.27%Sep 18, 2026
- High7.5IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.46%Sep 18, 2026
- UnknownCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service VulnerabilityCheck if you run itEPSS 0.55%Sep 18, 2026
- Medium6.5A flaw was found in Netty's HTTP/1.1 decoder.Check if you run itEPSS 0.90%Sep 18, 2026
- High7.5A flaw was found in Netty RtspDecoder.Check if you run itEPSS 0.77%Sep 18, 2026
- Medium4.2A flaw was found in EAP's Elytron.Check if you run itEPSS 0.28%Sep 18, 2026
- Medium5.3IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error m…Check if you run itEPSS 0.24%Sep 18, 2026
- Medium5.3IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Ed…Check if you run itEPSS 0.25%Sep 18, 2026
- High8.7braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards.Check if you run itEPSS 0.76%Sep 18, 2026
- Low3.7ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels.Check if you run itEPSS 0.39%Sep 18, 2026
- Critical9.8HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthent…Check if you run itEPSS 0.29%Sep 18, 2026
- UnknownMalicious code in tailwindcss-form (npm)Open the advisorySep 18, 2026
- High7.1WordPress 7.1.1 Maintenance and Security ReleasePatch nowKEVEPSS 0.35%Sep 18, 2026
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 0.98%Sep 18, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.91%Sep 18, 2026