Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCGA-x3w3-635p-5jh6Open the advisoryOct 15, 2026
- UnknownCGA-wvhp-26rr-526jOpen the advisoryOct 15, 2026
- Medium6.5Moderate: curl security updateOpen the advisoryOct 15, 2026
- UnknownCGA-xwjc-9mmj-4vggOpen the advisoryOct 15, 2026
- UnknownCGA-v3mg-62jh-346pOpen the advisoryOct 15, 2026
- UnknownCGA-v5mw-73p3-4wq9Open the advisoryOct 15, 2026
- High8.3Important: python36:3.6 security updateOpen the advisoryOct 15, 2026
- Low2.8A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4.Check if you run itEPSS 0.12%Oct 15, 2026
- Unknownlibzbar-devel-0.23.95-2.1 on GA mediaOpen the advisoryOct 15, 2026
- Unknownlibpoppler-cpp3-26.10.0-1.1 on GA mediaOpen the advisoryOct 15, 2026
- Unknownopenai-codex-0.162.1-2.1 on GA mediaOpen the advisoryOct 15, 2026
- Unknownnginx-1.31.7-1.1 on GA mediaOpen the advisoryOct 15, 2026
- Unknownlibsndfile-devel-1.2.2-6.1 on GA mediaOpen the advisoryOct 15, 2026
- Unknowngrok-build-1.0.45+git20260929.2bdd1d6-2.1 on GA mediaOpen the advisoryOct 15, 2026
- Unknownazure-storage-azcopy-10.32.8-2.1 on GA mediaOpen the advisoryOct 15, 2026
- UnknownImageMagick-7.1.2.33-1.1 on GA mediaOpen the advisoryOct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- High7.5Junrar is an open source Java RAR archive library.Check if you run itEPSS 0.40%Oct 15, 2026
- Mediumcontainerd: Unpack DoS via repeated opaque whiteoutsCheck if you run itEPSS 0.21%Oct 15, 2026
- High7.5FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying de…Check if you run itEPSS 0.34%Oct 15, 2026
- Critical10.0Podman: The command can be instructed to disable almost all sandboxing by image annotationCheck if you run itEPSS 0.92%Oct 15, 2026
- Medium5.3MessagePack: Nested arrays can blow past buffer length limitsCheck if you run itEPSS 0.65%Oct 15, 2026
- Unknownninjaforms ninja_forms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Oct 15, 2026
- Critical9.8The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.Patch nowKEVEPSS 0.29%Oct 15, 2026
- High7.5A Regular-Expression Denial of Service (ReDoS) in the Markdown2.Check if you run itEPSS 0.15%Oct 15, 2026