Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoSCheck if you run itEPSS 0.42%Sep 25, 2026
- High7.5RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpointCheck if you run itEPSS 0.48%Sep 25, 2026
- High8.2RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /loginCheck if you run itEPSS 0.14%Sep 25, 2026
- Unknown[20260907] - Core - Improper ACL checks in outputs for tagged itemsCheck if you run itEPSS 0.20%Sep 25, 2026
- Critical9.1Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentCheck if you run itEPSS 0.39%Sep 25, 2026
- High7.5A flaw was found in the OpenShift console.Check if you run itEPSS 0.51%Sep 23, 2026
- Critical9.1RabbitMQ: Trust-store whitelist by Issuer+Serial onlyCheck if you run itEPSS 0.25%Sep 23, 2026
- High8.2RabbitMQ: Web-MQTT decompression bombCheck if you run itEPSS 0.37%Sep 23, 2026
- High7.1RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated sizeCheck if you run itEPSS 0.26%Sep 23, 2026
- Critical9.2RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetchCheck if you run itEPSS 0.24%Sep 23, 2026
- High7.3RabbitMQ: Stored XSS via TLS peer-certificate DN in management UICheck if you run itEPSS 0.30%Sep 23, 2026
- High8.2RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoSCheck if you run itEPSS 0.32%Sep 23, 2026
- High7.6RabbitMQ: CORS * reflects Origin with Allow-CredentialsCheck if you run itEPSS 0.41%Sep 23, 2026
- High7.1RabbitMQ: Atom-table exhaustion via reply-to queue name decodingCheck if you run itEPSS 0.33%Sep 23, 2026
- UnknownImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 1.16%Sep 21, 2026
- High7.5A flaw was found in Netty RtspDecoder.Check if you run itEPSS 0.77%Sep 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be val…Check if you run itEPSS 0.21%Sep 17, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite->coll…Check if you run itEPSS 0.19%Sep 16, 2026
- Medium6.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.19%Sep 14, 2026
- Critical9.4PaperCut NG/MF Unsafe Reflection VulnerabilityPatch nowKEVEPSS 63.53%Aug 28, 2026
- High7.5fast-uri is a URI parser for Node.js.Check if you run itEPSS 0.22%Aug 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e_queue_start() deactivates and re-activates all c…Check if you run itEPSS 0.21%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length ncsi_send_cmd_nl() takes the number…Check if you run itEPSS 0.22%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs data_ep_set_params() sizes each URB transfer…Check if you run itEPSS 0.18%Aug 22, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix sk_buff leak when the header checks reject a packet tcf_ct_handle_fragments(…Check if you run itEPSS 0.49%Aug 22, 2026