Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.Check if you run itEPSS 0.58%Oct 14, 2026
- Medium6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Check if you run itEPSS 1.08%Oct 14, 2026
- Medium6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 1.08%Oct 14, 2026
- Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.Check if you run itEPSS 2.12%Oct 14, 2026
- Critical9.3pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths.Check if you run itEPSS 2.35%Oct 14, 2026
- Critical9.3Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_puCheck if you run itEPSS 0.72%Oct 14, 2026
- High8.8Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user th…Check if you run itEPSS 0.36%Oct 14, 2026
- High7.5An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service.Check if you run itEPSS 0.42%Oct 14, 2026
- UnknownSecurity update for containerdOpen the advisoryOct 14, 2026
- High8.7Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or una…Check if you run itEPSS 0.92%Oct 14, 2026
- Medium5.5A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.09%Oct 14, 2026
- High7.3Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security L…Check if you run itEPSS 0.27%Oct 14, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3.Check if you run itEPSS 0.42%Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.This issu…Check if you run itEPSS 0.20%Oct 14, 2026
- Unknownbind9 vulnerabilitiesOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for bindOpen the advisoryOct 14, 2026
- High7.5Important: python-tornado security updateOpen the advisoryOct 14, 2026
- High8.2Important: pcre2 security updateOpen the advisoryOct 14, 2026
- High7.8Important: kernel security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- High7.5Remote DoS through unchecked allocation in negentropyOpen the advisoryOct 14, 2026
- Medium5.3Stack overflow dropping a long chain of recursive typesOpen the advisoryOct 14, 2026
- UnknownFilesystem sandbox escape when renaming symlinks with trailing slashesOpen the advisoryOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionOpen the advisoryOct 14, 2026