Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute…Check if you run itEPSS 0.35%Oct 14, 2026
- High7.1ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a received frame holds a plain 14-byte struct net_eth_hdr.Check if you run itEPSS 0.34%Oct 14, 2026
- High7.5ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text.Check if you run itEPSS 0.09%Oct 14, 2026
- Critical9.3Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and pe…Check if you run itEPSS 0.62%Oct 14, 2026
- Medium6.3Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenti…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.2A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a comp…Check if you run itEPSS 0.37%Oct 14, 2026
- Medium6.9An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based atta…Check if you run itEPSS 0.29%Oct 14, 2026
- Critical9.2An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-ba…Check if you run itEPSS 0.51%Oct 14, 2026
- High8.2An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium5.3An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent att…Check if you run itEPSS 0.22%Oct 14, 2026
- Critical9.9Hestia Control Panel is a lightweight and powerful control panel for the modern web.Check if you run itEPSS 0.68%Oct 14, 2026
- Medium5.9erl_tar:extract/2 loops forever on a GNU sparse member with a trailing holeCheck if you run itEPSS 0.18%Oct 14, 2026
- High8.7HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in BanditCheck if you run itEPSS 0.53%Oct 14, 2026
- Medium4.3Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_…Check if you run itEPSS 0.16%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.54%Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.54%Oct 14, 2026
- Medium5.3YOURLS is a self-hosted, customizable URL shortener written in PHP.Check if you run itEPSS 0.47%Oct 14, 2026
- High8.0util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.18%Oct 14, 2026
- UnknownCVE-2026-53615 affecting package util-linux 2.40.2-6Open the advisoryOct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.14%Oct 14, 2026
- Low2.9rapidcsv is a C++ CSV parser library.Check if you run itEPSS 0.16%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string).Check if you run itEPSS 0.15%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).Check if you run itEPSS 0.15%Oct 14, 2026
- Medium6.9Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host s…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.2TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs…Check if you run itEPSS 0.44%Oct 14, 2026