Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.Check if you run itEPSS 0.11%Sep 11, 2026
- Low3.3In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.Check if you run itEPSS 0.16%Sep 11, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 91.95%Sep 11, 2026
- UnknownHCSEC-2026-34 - Consul vulnerable to an authorization bypass in the catalog node-write pathOpen the advisorySep 10, 2026
- UnknownCVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java LibraryCheck if you run itEPSS 0.54%Sep 10, 2026
- UnknownCVE-2026-88264 affecting package crun 1.24-6Open the advisorySep 10, 2026
- High7.8ZDI-26-655: PAPPL Printer IPP Processing Stack-based Buffer Overflow Local Privilege Escalation VulnerabilityOpen the advisorySep 10, 2026
- High7.8ZDI-26-650: (Pwn2Own) OpenAI Codex External Control of Configuration Setting Remote Code Execution VulnerabilityCheck if you run itEPSS 0.11%Sep 10, 2026
- High7.8ZDI-26-649: (Pwn2Own) OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution VulnerabilityCheck if you run itEPSS 0.30%Sep 10, 2026
- High7.8ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityCheck if you run itEPSS 0.11%Sep 10, 2026
- High7.8ZDI-26-652: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityOpen the advisorySep 10, 2026
- High7.8ZDI-26-653: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityOpen the advisorySep 10, 2026
- High7.8ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation VulnerabilityOpen the advisorySep 10, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Sep 10, 2026
- UnknownSogou Input Method 'biz_helper' Remote Code ExecutionPatch nowKEVEPSS 0.93%Sep 10, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.59%Sep 10, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could haveCheck if you run itEPSS 0.50%Sep 10, 2026
- UnknownCVE-2026-85788 - Issue with awslabs mysql-mcp-serverCheck if you run itEPSS 0.18%Sep 9, 2026
- UnknownCVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI DriverCheck if you run itEPSS 0.44%Sep 9, 2026
- UnknownCVE-2026-78379 - Consent bypass in Strands Agents Tools python_repl toolCheck if you run itEPSS 0.57%Sep 9, 2026
- Low3.0Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute fil…Check if you run itEPSS 0.33%Sep 9, 2026
- Unknownzstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to beCheck if you run itEPSS 0.20%Sep 9, 2026
- Unknownzstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sCheck if you run itEPSS 0.39%Sep 9, 2026
- Medium6.9PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients to waste server resources.Check if you run itEPSS 0.40%Sep 9, 2026