Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Ellucian WebAdvisor 3.2 Unauthenticated XXE InjectionCheck if you run itEPSS 0.34%Oct 15, 2026
- High8.7SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary ParserCheck if you run itEPSS 0.39%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- Mediumcontainerd: Unpack DoS via repeated opaque whiteoutsCheck if you run itEPSS 0.21%Oct 15, 2026
- Medium5.3MessagePack: Nested arrays can blow past buffer length limitsCheck if you run itEPSS 0.65%Oct 15, 2026
- High7.7FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared moduleCheck if you run itEPSS 0.23%Oct 15, 2026
- Medium6.5SFTPGo: Denial of service via malformed SSH channel requestCheck if you run itEPSS 0.31%Oct 15, 2026
- LowGitHub CLI allows path traversal through unescaped request URL componentsCheck if you run itEPSS 0.51%Oct 15, 2026
- Low3.3GitHub CLI partially discloses authentication tokens in outputCheck if you run itEPSS 0.15%Oct 15, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.37%Oct 15, 2026
- High8.8XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController).Check if you run itEPSS 0.30%Oct 15, 2026
- High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.Check if you run itEPSS 0.43%Oct 15, 2026
- High8.7AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.Check if you run itEPSS 0.37%Oct 15, 2026
- High7.5OpenNext Cloudflare is an open Next.js adapter for Cloudflare.Check if you run itEPSS 0.30%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.34%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- High7.4kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.49%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.45%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.52%Oct 15, 2026
- UnknownCritical: idm:DL1 security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- Medium5.3A security vulnerability has been detected in sgl-project SGLang up to 0.5.19.Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.1n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying…Check if you run itEPSS 0.28%Oct 14, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is…Check if you run itEPSS 0.22%Oct 14, 2026
- High8.2FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors.Check if you run itEPSS 0.25%Oct 14, 2026