Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a fi…Check if you run itEPSS 0.84%Oct 15, 2026
- Medium6.8UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatch_sf2_gen_is_valid() does not range-check generator…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium4.3Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Le…Check if you run itEPSS 0.18%Oct 15, 2026
- Medium6.9Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in BanditCheck if you run itEPSS 0.48%Oct 15, 2026
- High8.4A vulnerability has been identified in Siemens Software Center (All versions).Check if you run itEPSS 0.14%Oct 15, 2026
- Critical9.8WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerabilityCheck if you run itEPSS 0.27%Oct 15, 2026
- High7.3Moderate: environment-modules security updateOpen the advisoryOct 15, 2026
- High7.3PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' ParameterCheck if you run itEPSS 0.24%Oct 15, 2026
- Critical9.8Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query build…Check if you run itEPSS 0.30%Oct 15, 2026
- High7.5Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.Check if you run itEPSS 0.24%Oct 15, 2026
- High8.3Important: python36:3.6 security updateOpen the advisoryOct 15, 2026
- High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.Check if you run itEPSS 0.43%Oct 15, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is…Check if you run itEPSS 0.22%Oct 14, 2026
- Medium6.3n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook ResolutionCheck if you run itEPSS 0.36%Oct 14, 2026
- Medium6.9A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.Check if you run itEPSS 0.41%Oct 14, 2026
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.18%Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.29%Oct 14, 2026
- Medium5.3Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk UpdateCheck if you run itEPSS 0.27%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.40%Oct 14, 2026
- Critical9.3Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and pe…Check if you run itEPSS 0.62%Oct 14, 2026
- Medium6.3Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenti…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.7An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a rem…Check if you run itEPSS 0.46%Oct 14, 2026
- Medium6.9An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platf…Check if you run itEPSS 0.33%Oct 14, 2026
- High8.7A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a den…Check if you run itEPSS 0.55%Oct 14, 2026