Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- CriticalApache Kylin: JDBC URL Whitelist Verification BypassCheck if you run itEPSS 0.23%Oct 16, 2026
- High8.8The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7…Check if you run itEPSS 0.57%Oct 16, 2026
- UnknownApache Airflow SFTP provider: Async SFTP hook disables host-key verification by defaultCheck if you run itEPSS 0.22%Oct 15, 2026
- MediumApache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement tokenCheck if you run itEPSS 0.34%Oct 15, 2026
- UnknownApache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by defaultCheck if you run itEPSS 0.30%Oct 15, 2026
- UnknownThe Apache Airflow Keycloak provider's multi-team provisioning ( ) granted every team role global read access to audit logs.Check if you run itEPSS 0.26%Oct 15, 2026
- UnknownCVE-2026-79768 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Check if you run itEPSS 0.59%Oct 14, 2026
- UnknownCVE-2026-73637 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Check if you run itEPSS 0.48%Oct 14, 2026
- UnknownCVE-2026-73636 is listed by USN-8931-1: Apache HTTP Server vulnerabilities.Check if you run itEPSS 0.41%Oct 14, 2026
- Medium5.3YOURLS is a self-hosted, customizable URL shortener written in PHP.Check if you run itEPSS 0.47%Oct 14, 2026
- UnknownJVN#88474777: SiteGuard Server Edition vulnerable to OS command injectionPatch nowKEVEPSS 0.66%Oct 14, 2026
- UnknownApache Tomcat Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 8.97%Oct 14, 2026
- Medium5.3Contao: Path traversal in the images controllerCheck if you run itEPSS 0.31%Oct 9, 2026
- High8.8Improper input validation vulnerability in Apache Camel Karavan.Check if you run itEPSS 0.39%Oct 9, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.Check if you run itEPSS 0.52%Oct 9, 2026
- High7.5In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS.Check if you run itEPSS 0.25%Oct 9, 2026
- Critical9.1Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCo…Check if you run itEPSS 0.19%Oct 9, 2026
- High7.5Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions.Check if you run itEPSS 0.32%Oct 9, 2026
- Medium6.1Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication.Check if you run itEPSS 0.20%Oct 9, 2026
- High7.5CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap.Check if you run itEPSS 0.28%Oct 9, 2026
- High8.1Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain mul…Check if you run itEPSS 0.32%Oct 9, 2026
- High7.5By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document.Check if you run itEPSS 0.46%Oct 9, 2026
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…Check if you run itEPSS 0.20%Oct 9, 2026
- High7.5In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attac…Check if you run itEPSS 0.56%Oct 9, 2026
- High7.5Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module.Check if you run itEPSS 0.33%Oct 9, 2026
671 records · page 1 of 27
PreviousNext