Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-76442 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.47%Oct 14, 2026
- UnknownCVE-2026-76441 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.53%Oct 14, 2026
- UnknownCVE-2026-76440 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.62%Oct 14, 2026
- UnknownCVE-2026-20353 is listed by Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026.Check if you run itEPSS 0.40%Oct 14, 2026
- Medium6.6CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)Check if you run itEPSS 0.33%Oct 14, 2026
- Medium6.1CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.84%Oct 14, 2026
- Medium4.9CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.28%Oct 14, 2026
- Medium4.6CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)Check if you run itEPSS 0.32%Oct 14, 2026
- Low1.1CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW)Check if you run itEPSS 0.27%Oct 14, 2026
- Medium5.9A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS.Check if you run itEPSS 0.10%Oct 14, 2026
- Medium4.3A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.Check if you run itEPSS 0.10%Oct 14, 2026
- Medium6.1CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.83%Oct 14, 2026
- Medium4.3Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.Check if you run itEPSS 0.14%Oct 14, 2026
- Low1.1CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)Check if you run itEPSS 0.11%Oct 14, 2026
- Medium6.4A flaw was found in the DPDK vhost library.Check if you run itEPSS 0.10%Oct 14, 2026
- High7.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.48%Oct 14, 2026
- High7.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.48%Oct 14, 2026
- High7.7Discourse is an open-source discussion platform.Check if you run itEPSS 0.43%Oct 14, 2026
- Medium4.3Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component.Check if you run itEPSS 0.27%Oct 14, 2026
- High8.3Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rCheck if you run itEPSS 0.18%Oct 14, 2026
- High7.2The fix for CVE-2026-12996 was incomplete.Check if you run itEPSS 0.41%Oct 14, 2026
- Medium5.9Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository…Check if you run itEPSS 0.29%Oct 14, 2026
- Medium5.3When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint dur…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.5Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access.Check if you run itEPSS 0.19%Oct 14, 2026
- High8.1Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account.Check if you run itEPSS 0.24%Oct 14, 2026