Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- HighHTTP/1 client connection desynchronization after CONNECT rejection in net/httpCheck if you run itEPSS 0.31%Oct 8, 2026
- High7.5music-metadata is a metadata parser for audio and video media files.Check if you run itEPSS 0.29%Oct 8, 2026
- High7.5MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parametersCheck if you run itEPSS 0.39%Oct 8, 2026
- Medium6.0In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further member…Check if you run itEPSS 0.26%Oct 8, 2026
- UnknownAsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukCheck if you run itEPSS 0.26%Oct 8, 2026
- Medium4.8FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when…Check if you run itEPSS 0.14%Oct 8, 2026
- High8.7A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.22%Oct 8, 2026
- UnknownMalicious code in kiyoramarkets (npm)Open the advisoryOct 8, 2026
- UnknownMalicious code in @ikyyjee/ikkysingle (npm)Open the advisoryOct 7, 2026
- Medium5.3Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values ar…Check if you run itEPSS 0.16%Oct 5, 2026
- MediumRabbitMQ OAuth credential refresh retains revoked runtime tagsCheck if you run itEPSS 0.23%Oct 1, 2026
- HighRabbitMQ: Consecutive topic wildcards cause combinatorial routing workCheck if you run itEPSS 0.37%Oct 1, 2026
- MediumRabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of ServiceCheck if you run itEPSS 0.38%Oct 1, 2026
- MediumRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionCheck if you run itEPSS 0.42%Oct 1, 2026
- HighRabbitMQ: Incomplete fix for CVE-2026-44838: does not escape , leaving room for an MQTT topic permission bypassCheck if you run itEPSS 0.23%Oct 1, 2026
- MediumRabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_statusCheck if you run itEPSS 0.29%Oct 1, 2026
- MediumRabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float expCheck if you run itEPSS 0.34%Oct 1, 2026
- MediumRabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission checkCheck if you run itEPSS 0.34%Oct 1, 2026
- HighRabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UICheck if you run itEPSS 0.16%Oct 1, 2026
- Critical9.3The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation.Check if you run itEPSS 0.59%Oct 1, 2026
- High8.5WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerabilityCheck if you run itEPSS 0.26%Sep 30, 2026
- Unknownurllib3 is an HTTP client library for Python.Check if you run itEPSS 0.29%Sep 29, 2026
- UnknownCVE-2026-82989 is listed by VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise.Check if you run itEPSS 0.67%Sep 25, 2026
- UnknownCVE-2026-82988 is listed by VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise.Check if you run itEPSS 0.46%Sep 25, 2026
- UnknownCVE-2026-82987 is listed by VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise.Open the advisorySep 25, 2026