Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info that allows malicious SM…Check if you run itEPSS 0.47%Oct 14, 2026
- High7.1libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients by sending an unchecked FileNamCheck if you run itEPSS 0.45%Oct 14, 2026
- Medium4.8CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by supplying crafted ADF node headers.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unva…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.9Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process b…Check if you run itEPSS 0.67%Oct 14, 2026
- Medium4.8Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model dire…Check if you run itEPSS 0.24%Oct 14, 2026
- Low3.1miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check aftCheck if you run itEPSS 0.29%Oct 14, 2026
- Low2.3miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds viCheck if you run itEPSS 0.29%Oct 14, 2026
- Medium6.9libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode valuesCheck if you run itEPSS 0.17%Oct 14, 2026
- Medium6.33proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.8Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabledCheck if you run itEPSS 0.35%Oct 14, 2026
- High7.8mise manages dev tools like node, python, cmake, and terraform.Check if you run itEPSS 0.19%Oct 14, 2026
- Critical9.1Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.39%Oct 14, 2026
- Medium5.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.37%Oct 14, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.69%Oct 14, 2026
- Medium6.5Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.41%Oct 14, 2026
- Medium6.5Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool.Check if you run itEPSS 0.42%Oct 14, 2026
- Critical9.2Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is usedCheck if you run itEPSS 0.46%Oct 14, 2026
- High7.1Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabledCheck if you run itEPSS 0.41%Oct 14, 2026
- High8.8Junos OS: A crafted OVSDB message crashes vgd and allows remote code executionCheck if you run itEPSS 0.43%Oct 14, 2026
- High7.1Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is usedCheck if you run itEPSS 0.29%Oct 14, 2026
- Critical9.2Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is usedCheck if you run itEPSS 0.74%Oct 14, 2026
- UnknownA remote code execution vulnerability exists within the Field UI module in Drupal core.Open the advisoryOct 14, 2026
- UnknownVU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationCheck if you run itEPSS 0.16%Oct 14, 2026
- UnknownCVE-2026-76443 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.53%Oct 14, 2026