Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 1.08%Oct 14, 2026
- Critical9.2Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL.Check if you run itEPSS 2.12%Oct 14, 2026
- Critical9.3pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths.Check if you run itEPSS 2.35%Oct 14, 2026
- Critical9.3Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_puCheck if you run itEPSS 0.72%Oct 14, 2026
- Medium5.9Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_…Check if you run itEPSS 0.39%Oct 14, 2026
- High8.8Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user th…Check if you run itEPSS 0.36%Oct 14, 2026
- High7.5An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service.Check if you run itEPSS 0.42%Oct 14, 2026
- High8.7Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or una…Check if you run itEPSS 0.92%Oct 14, 2026
- Critical9.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc.Check if you run itEPSS 1.70%Oct 14, 2026
- Critical9.8Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc.Check if you run itEPSS 1.68%Oct 14, 2026
- Medium5.5A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.09%Oct 14, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.Check if you run itEPSS 0.46%Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected X…Check if you run itEPSS 0.20%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.Th…Check if you run itEPSS 0.27%Oct 14, 2026
- High7.3Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security L…Check if you run itEPSS 0.27%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in Magepeople inc.Check if you run itEPSS 0.27%Oct 14, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored…Check if you run itEPSS 0.18%Oct 14, 2026
- High7.3Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast L…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Inco…Check if you run itEPSS 0.22%Oct 14, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3.Check if you run itEPSS 0.42%Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.This issu…Check if you run itEPSS 0.20%Oct 14, 2026
- UnknownCVE-2026-19662 is listed by USN-8929-1: Bind vulnerabilities.Check if you run itEPSS 0.46%Oct 14, 2026
- UnknownCVE-2026-19033 is listed by USN-8929-1: Bind vulnerabilities.Check if you run itEPSS 0.24%Oct 14, 2026
- UnknownCVE-2026-13204 is listed by USN-8929-1: Bind vulnerabilities.Check if you run itEPSS 0.52%Oct 14, 2026
- UnknownCVE-2026-11721 is listed by USN-8929-1: Bind vulnerabilities.Check if you run itEPSS 0.40%Oct 14, 2026