Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL…Check if you run itEPSS 0.49%Aug 24, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.Check if you run itEPSS 0.43%Aug 24, 2026
- Critical9.3phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an ins…Check if you run itEPSS 0.64%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.23%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.40%Aug 24, 2026
- Medium6.0The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates.Check if you run itEPSS 0.24%Aug 24, 2026
- High8.5DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, inc…Check if you run itEPSS 0.24%Aug 24, 2026
- High8.7The HTTP media server running on DJI drones serves stored photos and videos through the endpoint without authenticating the requesting client.Check if you run itEPSS 0.41%Aug 24, 2026
- Low1.3A vulnerability has been found in Piwigo 16.3.0.Check if you run itEPSS 0.66%Aug 24, 2026
- High7.8ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation VulnerabilityOpen the advisoryAug 24, 2026
- High8.2ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation VulnerabilityOpen the advisoryAug 24, 2026
- High7.0ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation VulnerabilityOpen the advisoryAug 24, 2026
- High7.1ZDI-26-589: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.27%Aug 24, 2026
- High8.4exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output.Check if you run itEPSS 0.41%Aug 24, 2026
- High8.7exceljs through 4.4.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths.Check if you run itEPSS 0.51%Aug 24, 2026
- Critical9.3exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects.Check if you run itEPSS 0.60%Aug 24, 2026
- High8.7exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio.Check if you run itEPSS 0.63%Aug 24, 2026
- Medium6.9BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC…Check if you run itEPSS 0.41%Aug 24, 2026
- Low2.1A security vulnerability has been detected in Open5GS 2.8.0.Check if you run itEPSS 0.56%Aug 24, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.37%Aug 24, 2026
- Low3.7Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey.Check if you run itEPSS 0.41%Aug 23, 2026
- Medium5.3Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line.Check if you run itEPSS 0.42%Aug 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: sched_ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fai…Check if you run itEPSS 0.17%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b_addr in xfs_buf_free When xfs_buf_alloc_backing_mem() fails, xfs_buf_free() is c…Check if you run itEPSS 0.21%Aug 22, 2026