Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.1smb: client: fix potential OOB read in smb3_enum_snapshots()Oct 6, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)Oct 6, 2026
- UnknownImportant: nodejs:22 security updateOct 6, 2026
- High8.4PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encodingOct 5, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionOct 5, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresEPSS 0.3%Oct 5, 2026
- Unknownuv: Path traversal on Windows through wheel extractionEPSS 0.4%Oct 5, 2026
- Medium6.5Snowflake drivers writes sensitive information to logsEPSS 0.1%Oct 5, 2026
- Low3.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.EPSS 0.2%Oct 5, 2026
- Medium5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.EPSS 0.5%Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)Oct 5, 2026
- UnknownSecurity update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)Oct 5, 2026
- UnknownCVE-2026-82458 affecting package influxdb for versions less than 2.7.5-21Oct 2, 2026
- High8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a dirOct 1, 2026
- High7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi respEPSS 0.5%Oct 1, 2026
- High7.5Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of serviceEPSS 0.9%Oct 1, 2026
- High7.5Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configuratiEPSS 0.5%Oct 1, 2026
- Medium5.3Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebEPSS 0.5%Oct 1, 2026
- High7.5Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies.EPSS 0.6%Oct 1, 2026
- MediumRabbitMQ OAuth credential refresh retains revoked runtime tagsOct 1, 2026
- HighRabbitMQ: Consecutive topic wildcards cause combinatorial routing workOct 1, 2026