Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injectin…Check if you run itEPSS 0.73%Oct 15, 2026
- High7.5Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via un…Check if you run itEPSS 0.89%Oct 15, 2026
- High8.6Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execut…Check if you run itEPSS 8.45%Oct 15, 2026
- High8.6Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commands as…Check if you run itEPSS 7.05%Oct 15, 2026
- High8.6Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as roo…Check if you run itEPSS 6.55%Oct 15, 2026
- High8.6Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wire…Check if you run itEPSS 7.05%Oct 15, 2026
- High8.6Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by stori…Check if you run itEPSS 8.63%Oct 15, 2026
- Medium6.0@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() that allows attackers to modify inherited builtins via dotted condition keys.Check if you run itEPSS 0.38%Oct 15, 2026
- Low2.3La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access.Check if you run itEPSS 0.27%Oct 15, 2026
- Medium5.1LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vulnerability that allows authenticated agents to execute script by uploading SVGs with malformed Co…Check if you run itEPSS 0.23%Oct 15, 2026
- Medium6.9GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a static tabl…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium6.8libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped.Check if you run itEPSS 0.13%Oct 15, 2026
- UnknownCVE-2026-111165 affecting package libmikmod 3.3.11.1-14Open the advisoryOct 15, 2026
- Medium6.8UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events.Check if you run itEPSS 0.20%Oct 15, 2026
- Medium6.9WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read beyond buffers via underflowe…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW_MidiSequencer that allows attackers to corrupt stack memory via c…Check if you run itEPSS 0.20%Oct 15, 2026
- High8.7LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the inference worker by supplying the internal pd_kv_t…Check if you run itEPSS 0.42%Oct 15, 2026
- Medium6.9libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() in parseutils.c that reads past truncated miniSEED 2 record buffers.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/sndfont.c that allows attackers to corrupt memory by supplying unva…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument gener…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked genera…Check if you run itEPSS 0.13%Oct 15, 2026