Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.Check if you run itEPSS 0.16%Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.Check if you run itEPSS 0.16%Oct 14, 2026
- High8.8A flaw was found in DPDK lib/vhost.Check if you run itEPSS 0.14%Oct 14, 2026
- High8.8The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212 via the check_mime…Check if you run itEPSS 0.74%Oct 14, 2026
- High8.1ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request bod…Check if you run itEPSS 0.27%Oct 14, 2026
- Medium4.9Redash is a package for data visualization and sharing.Check if you run itEPSS 0.41%Oct 14, 2026
- High8.1Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models.Check if you run itEPSS 0.49%Oct 14, 2026
- Medium6.5Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol.Check if you run itEPSS 0.65%Oct 14, 2026
- High8.4The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic.Check if you run itEPSS 0.16%Oct 14, 2026
- Critical9.1In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this c…Check if you run itEPSS 0.23%Oct 14, 2026
- Critical9.3A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause…Check if you run itEPSS 0.54%Oct 14, 2026
- Critical9.3An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an…Check if you run itEPSS 0.49%Oct 14, 2026
- High7.0SeaweedFS is a distributed storage system for files and blobs.Check if you run itEPSS 0.42%Oct 14, 2026
- High7.1Flyto2 Core is an execution kernel for automation and AI-agent workflows.Check if you run itEPSS 0.24%Oct 14, 2026
- Critical9.8e107 is a content management system (CMS).Check if you run itEPSS 0.60%Oct 14, 2026
- Critical10.0e107 is a content management system (CMS).Check if you run itEPSS 0.52%Oct 14, 2026
- Medium5.7A flaw was found in evolution-data-server.Check if you run itEPSS 0.39%Oct 14, 2026
- High7.5FOG is a free open-source cloning/imaging/rescue suite/inventory management system.Check if you run itEPSS 0.51%Oct 14, 2026
- High7.5The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.70%Oct 14, 2026
- High7.5The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.61%Oct 14, 2026
- UnknownMalicious code in @xxxfnbs21/hello-demo (npm)Open the advisoryOct 14, 2026
- UnknownThe Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability.Open the advisoryOct 14, 2026
- UnknownThe Drupal core Link module provides a field type that can be used for internal and external URLs.Open the advisoryOct 14, 2026
- UnknownGin is an administration theme that provides a modern, clean, and customizable backend UI for editors and site administrators.Open the advisoryOct 14, 2026
- Low3.7An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through Gra…Check if you run itEPSS 0.29%Oct 14, 2026