Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4xfs: bounds-check buffer log item's dirty bitmapCheck if you run itEPSS 0.14%Aug 26, 2026
- High7.8af_unix: Unlink scc_entry in unix_del_edge().Check if you run itEPSS 0.17%Aug 26, 2026
- Critical9.8macvlan: inherit needed_headroom and needed_tailroom from lowerdevCheck if you run itEPSS 0.54%Aug 26, 2026
- Medium6.9code-projects Simple Inventory System edit.php sql injectionOpen the advisoryAug 25, 2026
- Medium5.3Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fixCheck if you run itEPSS 0.34%Aug 25, 2026
- UnknownHeap-buffer-overflow in lua_errorOpen the advisoryAug 25, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.97%Aug 25, 2026
- UnknownWeak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 8.96%Aug 25, 2026
- UnknownRed Hat build_of_keycloak Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 6.41%Aug 25, 2026
- Medium6.0A flaw was found in CRI-O's container-creation environment-variable handling ( in , consumed by in ).Check if you run itEPSS 0.11%Aug 24, 2026
- High8.6Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function.Check if you run itEPSS 1.78%Aug 24, 2026
- Critical9.3rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrato…Check if you run itEPSS 0.77%Aug 24, 2026
- High7.1rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames contain…Check if you run itEPSS 0.72%Aug 24, 2026
- UnknownMalicious code in babel-polyfill-plugin-corejs2 (npm)Open the advisoryAug 24, 2026
- High7.7A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends.Check if you run itEPSS 0.56%Aug 24, 2026
- High7.2A path traversal vulnerability was found in AWX's project archive extraction.Check if you run itEPSS 1.72%Aug 24, 2026
- High8.8RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view.Check if you run itEPSS 0.44%Aug 24, 2026
- Critical9.4RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint.Check if you run itEPSS 0.58%Aug 24, 2026
- High8.7RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses.Check if you run itEPSS 0.80%Aug 24, 2026
- High8.2RansomLook contains insufficient resource validation in the analysis PDF generation functionality.Check if you run itEPSS 0.41%Aug 24, 2026
- High8.2RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts.Check if you run itEPSS 0.59%Aug 24, 2026
- High8.7RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external notification channels.Check if you run itEPSS 0.45%Aug 24, 2026
- Medium6.9Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SC…Check if you run itEPSS 0.45%Aug 24, 2026
- Critical9.2RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to r…Check if you run itEPSS 0.69%Aug 24, 2026
- High8.8RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint.Check if you run itEPSS 0.69%Aug 24, 2026