Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.14%Oct 15, 2026
- Critical9.8ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.55%Oct 15, 2026
- High7.0Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability.Check if you run itEPSS 0.14%Oct 15, 2026
- High7.2ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution VulnerabilityCheck if you run itEPSS 0.65%Oct 15, 2026
- High7.5ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution VulnerabilityCheck if you run itEPSS 4.36%Oct 15, 2026
- Medium5.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.Check if you run itEPSS 0.09%Oct 15, 2026
- Medium4.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.Check if you run itEPSS 0.10%Oct 15, 2026
- High7.1A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.Check if you run itEPSS 0.16%Oct 15, 2026
- Medium6.4Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text ContentCheck if you run itEPSS 0.19%Oct 15, 2026
- Critical9.810Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' ParameterCheck if you run itEPSS 0.92%Oct 15, 2026
- High7.3PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' ParameterCheck if you run itEPSS 0.24%Oct 15, 2026
- Medium6.4A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operationsCheck if you run itEPSS 0.14%Oct 15, 2026
- High8.6Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.Check if you run itEPSS 0.30%Oct 15, 2026
- Critical9.5In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific…Check if you run itEPSS 0.23%Oct 15, 2026
- High7.1In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length…Check if you run itEPSS 0.17%Oct 15, 2026
- Critical9.8Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query build…Check if you run itEPSS 0.30%Oct 15, 2026
- Medium4.3CGA-xvqh-gcpr-vh87Open the advisoryOct 15, 2026
- Medium5.0Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project.Check if you run itEPSS 0.10%Oct 15, 2026
- High7.5CGA-xw4p-2r99-qg6rOpen the advisoryOct 15, 2026
- UnknownCGA-x3w8-3rxg-cg2fOpen the advisoryOct 15, 2026
- UnknownCGA-xxq6-v37g-vh35Open the advisoryOct 15, 2026