Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability.Check if you run itEPSS 0.11%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmem_invalida…Check if you run itEPSS 0.21%Sep 16, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate MSI data before routing it to EIOINTC pch_msi_set_irq() passes e->msi.data…Check if you run itEPSS 0.17%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the…Check if you run itEPSS 0.21%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: force complete the MES ring fences on reset The MES scheduler ring has no drm scheduler…Check if you run itEPSS 0.21%Sep 16, 2026
- High7.8media: cx231xx: reject geometry changes while the VBI queue is busyCheck if you run itEPSS 0.16%Sep 16, 2026
- High8.8drm/amdkfd: Add TLB flush after MES queue eviction/suspensionCheck if you run itEPSS 0.17%Sep 16, 2026
- High8.8vfio/pci: clear vdev->msi_perm after freeing it on init failureCheck if you run itEPSS 0.16%Sep 16, 2026
- Medium5.3ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation VulnerabilityOpen the advisorySep 16, 2026
- High7.8ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.24%Sep 16, 2026
- High8.8ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution VulnerabilityCheck if you run itEPSS 0.46%Sep 16, 2026
- High7.7ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityCheck if you run itEPSS 0.41%Sep 16, 2026
- High7.7ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityCheck if you run itEPSS 0.41%Sep 16, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 14.03%Sep 16, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownHCSEC-2026-39 - Go-getter vulnerable to a privilege escalation issue in its archive decompression handlingOpen the advisorySep 15, 2026
- High8.5Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 i…Check if you run itEPSS 0.19%Sep 15, 2026
- High7.3A flaw was found in environment-modules.Check if you run itEPSS 0.22%Sep 15, 2026
- High8.2Tornado before 6.5.7 Credential Leak via Handle ReuseCheck if you run itEPSS 0.26%Sep 15, 2026
- High8.7Tornado before 6.5.8 Memory Amplification DoS via multipartCheck if you run itEPSS 0.42%Sep 15, 2026
- Critical9.0Tornado before 6.3.3 HTTP Request Smuggling via Content-LengthCheck if you run itEPSS 0.38%Sep 15, 2026
- UnknownNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module.Check if you run itEPSS 0.26%Sep 15, 2026
- Low3.7The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received dur…Check if you run itEPSS 0.22%Sep 15, 2026
- UnknownUse of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.69%Sep 15, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.38%Sep 15, 2026