Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Moderate: environment-modules security updateOpen the advisoryOct 15, 2026
- High8.1Important: kernel security updateOpen the advisoryOct 15, 2026
- UnknownIn versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.27%Oct 15, 2026
- Criticalipv4: free inet_opt and ireq_opt after an RCU grace periodCheck if you run itEPSS 0.17%Oct 15, 2026
- UnknownMalicious code in idlive-face-capture-web-development (npm)Open the advisoryOct 15, 2026
- MediumAn attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is curren…Check if you run itEPSS 0.26%Oct 15, 2026
- HighThe storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states.Check if you run itEPSS 0.32%Oct 15, 2026
- Medium6.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.19%Oct 15, 2026
- UnknownMalicious code in proxy-rubikis (PyPI)Open the advisoryOct 15, 2026
- UnknownMalicious code in py-wormgpt (PyPI)Open the advisoryOct 15, 2026
- UnknownMalicious code in proxyrubika (PyPI)Open the advisoryOct 15, 2026
- UnknownMalicious code in getpubip (PyPI)Open the advisoryOct 15, 2026
- Medium6.9Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substringCheck if you run itEPSS 0.43%Oct 15, 2026
- Medium6.9In Eclipse Jetty, across various versions of , and , two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per JakCheck if you run itEPSS 0.40%Oct 15, 2026
- Medium5.6Eclipse Jetty's retains authentication credentials in a serializable object.Check if you run itEPSS 0.13%Oct 15, 2026
- Critical9.3An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path.Check if you run itEPSS 0.54%Oct 15, 2026
- Medium6.3A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.Check if you run itEPSS 0.28%Oct 15, 2026
- High8.9A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.Check if you run itEPSS 0.24%Oct 15, 2026
- Medium4.8A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.29%Oct 15, 2026
- High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.14%Oct 15, 2026
- High8.5An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.12%Oct 15, 2026
- High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.Check if you run itEPSS 0.47%Oct 15, 2026
- Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.49%Oct 15, 2026
- High8.7An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.41%Oct 15, 2026
- High8.6A relative path traversal vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.54%Oct 15, 2026