Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.37%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.52%Oct 15, 2026
- UnknownModerate: wireshark security updateOpen the advisoryOct 15, 2026
- UnknownImportant: libsoup3 security updateOpen the advisoryOct 15, 2026
- UnknownImportant: rpcbind security updateOpen the advisoryOct 15, 2026
- UnknownImportant: rpcbind security updateOpen the advisoryOct 15, 2026
- UnknownImportant: rpcbind security updateOpen the advisoryOct 15, 2026
- UnknownImportant: ghostscript security updateOpen the advisoryOct 15, 2026
- UnknownImportant: ghostscript security updateOpen the advisoryOct 15, 2026
- UnknownImportant: ghostscript security updateOpen the advisoryOct 15, 2026
- UnknownImportant: wireshark security updateOpen the advisoryOct 15, 2026
- UnknownImportant: grafana security updateOpen the advisoryOct 15, 2026
- UnknownImportant: lrzsz security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- UnknownCritical: idm:DL1 security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- UnknownImportant: libsoup security updateOpen the advisoryOct 15, 2026
- UnknownCGA-v75p-62c5-q8pmOpen the advisoryOct 14, 2026
- UnknownCGA-vwcc-cc2h-ww4wOpen the advisoryOct 14, 2026
- UnknownCGA-mjgh-vcxv-65mrOpen the advisoryOct 14, 2026
- UnknownCGA-xw6h-crx9-cprrOpen the advisoryOct 14, 2026
- UnknownCGA-w823-g2cp-w6pcOpen the advisoryOct 14, 2026
- Medium5.3A security vulnerability has been detected in sgl-project SGLang up to 0.5.19.Check if you run itEPSS 0.32%Oct 14, 2026
- High7.7n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplie…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium6.1n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying…Check if you run itEPSS 0.28%Oct 14, 2026
- High7.0n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression val…Check if you run itEPSS 0.29%Oct 14, 2026
- High7.1FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers…Check if you run itEPSS 0.22%Oct 14, 2026