Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic…Check if you run itEPSS 0.42%Oct 15, 2026
- Medium6.5A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, C…Check if you run itEPSS 0.09%Oct 15, 2026
- Medium6.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.23%Oct 15, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.34%Oct 15, 2026
- Low3.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.20%Oct 15, 2026
- Low2.7EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.22%Oct 15, 2026
- Medium6.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.23%Oct 15, 2026
- UnknownIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-downl…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium4.8A flaw was found in OpenSSH.Check if you run itEPSS 0.18%Oct 15, 2026
- Medium4.6Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmationCheck if you run itEPSS 0.13%Oct 15, 2026
- Medium5.4Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryCheck if you run itEPSS 0.18%Oct 15, 2026
- Medium4.7Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium4.7Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryCheck if you run itEPSS 0.13%Oct 15, 2026
- Medium6.5Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserCheck if you run itEPSS 0.17%Oct 15, 2026
- UnknownCVE-2026-98432 affecting package kernel 6.6.157.1-1Open the advisoryOct 15, 2026
- High8.4Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a…Check if you run itEPSS 0.16%Oct 15, 2026
- UnknownMalicious code in xapi-lib (npm)Open the advisoryOct 15, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 15, 2026
- High8.2Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature.Check if you run itEPSS 0.28%Oct 15, 2026
- High8.8Important: hplip security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- High7.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.34%Oct 15, 2026
- High7.8Important: kernel-rt security updateOpen the advisoryOct 15, 2026
- High7.3Moderate: environment-modules security updateOpen the advisoryOct 15, 2026