Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCisco BroadWorks CommPilot Application Software Authorization Bypass VulnerabilityCheck if you run itEPSS 0.56%Sep 16, 2026
- UnknownCisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityCheck if you run itEPSS 0.19%Sep 16, 2026
- Medium4.9ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure VulnerabilityCheck if you run itEPSS 0.29%Sep 16, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmem_invalida…Check if you run itEPSS 0.21%Sep 16, 2026
- High7.2ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026
- High7.7ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026
- High7.7ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure VulnerabilityOpen the advisorySep 16, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 14.03%Sep 16, 2026
- Unknownproperfraction profilepress Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.92%Sep 16, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.64%Sep 15, 2026
- Medium5.5A flaw was found in SSSD (System Security Services Daemon).Check if you run itEPSS 0.14%Sep 14, 2026
- Medium4.3Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-actio…Check if you run itEPSS 0.37%Sep 14, 2026
- Critical9.0ZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution VulnerabilityCheck if you run itEPSS 0.48%Sep 14, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScr…Check if you run itEPSS 0.23%Sep 14, 2026
- Unknownpluginus husky_-_products_filter_professional_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.23%Sep 14, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths nfsd_dispatch() sets rq_s…Check if you run itEPSS 0.16%Sep 11, 2026
- High7.5sunrpc: route to a populated pool in svc_pool_for_cpu()Check if you run itEPSS 0.71%Sep 11, 2026
- Medium5.5kernel: RDMA/rxe: Fix incomplete state save in rxe_requesterCheck if you run itEPSS 0.16%Sep 11, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- Unknownsensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 63.60%Sep 10, 2026
- UnknownCVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities routeCheck if you run itEPSS 0.72%Sep 9, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 2.91%Sep 9, 2026
- Medium5.1A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.Check if you run itEPSS 0.14%Sep 8, 2026
- Low2.7Null Pointer Dereference in Log ReportCheck if you run itEPSS 1.07%Sep 8, 2026
- Unknownmonstaftp monsta_ftp Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.51%Sep 7, 2026