Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Fleet doesn’t validate a server’s certificate when connecting through SSHCheck if you run itEPSS 0.19%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Check if you run itEPSS 0.28%Oct 15, 2026
- Critical9.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handli…Check if you run itEPSS 0.42%Oct 15, 2026
- UnknownMalicious code in tailwindcss-uniform (npm)Open the advisoryOct 15, 2026
- UnknownSecurity update for iperfOpen the advisoryOct 15, 2026
- High7.0The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest.Check if you run itEPSS 0.12%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect QcalAgent.Check if you run itEPSS 0.36%Oct 15, 2026
- High8.7A relative path traversal vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.36%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.3A path traversal vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.36%Oct 15, 2026
- High7.5The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address.Check if you run itEPSS 0.39%Oct 15, 2026
- Medium5.3An observable timing discrepancy vulnerability has been reported to affect QuRouter.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.Check if you run itEPSS 0.36%Oct 15, 2026
- Medium4.6An external control of system or configuration setting vulnerability has been reported to affect QuRouter.Check if you run itEPSS 0.11%Oct 15, 2026
- High7.7A path traversal vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.37%Oct 15, 2026
- High7.7A path traversal vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.37%Oct 15, 2026
- Low2.3A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.27%Oct 15, 2026
- Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.27%Oct 15, 2026
- Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.27%Oct 15, 2026
- Critical9.8SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred.Check if you run itEPSS 0.27%Oct 15, 2026
- High8.8renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments.Check if you run itEPSS 0.42%Oct 15, 2026
- High7.1Multiple jail filesystem root escapesCheck if you run itEPSS 0.18%Oct 15, 2026
- High8.8The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5.Check if you run itEPSS 0.47%Oct 15, 2026