Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX ActionCheck if you run itEPSS 0.25%Oct 16, 2026
- Medium4.3OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.36%Oct 15, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.73%Oct 15, 2026
- Medium6.0A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5.Check if you run itEPSS 0.51%Oct 14, 2026
- Medium5.3LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters.Check if you run itEPSS 0.22%Oct 14, 2026
- Medium6.5The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on both the 'jkit_post_block' and 'je…Check if you run itEPSS 0.31%Oct 14, 2026
- Medium4.1The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existin…Check if you run itEPSS 0.24%Oct 14, 2026
- Low3.7A flaw was found in BusyBox's httpd web server.Check if you run itEPSS 0.22%Oct 13, 2026
- Unknownlinux, linux-aws, linux-azure, linux-azure-5.4, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-rasOpen the advisoryOct 13, 2026
- Unknownlinux-oracle vulnerabilitiesOpen the advisoryOct 13, 2026
- Unknownlinux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilitiesOpen the advisoryOct 13, 2026
- UnknownFreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped.Check if you run itEPSS 0.34%Oct 13, 2026
- Critical9.1Netherman Portal del Hermano (portaldelhermano.es) before 2026-10-06 contains a broken authentication vulnerability in its password-recovery flow at the POST /password…Check if you run itEPSS 0.40%Oct 12, 2026
- Medium5.3Contao: The registration module re-sends activation mailsCheck if you run itEPSS 0.26%Oct 9, 2026
- Medium5.3Contao: Path traversal in the images controllerCheck if you run itEPSS 0.31%Oct 9, 2026
- High7.4MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPESCheck if you run itEPSS 0.44%Oct 8, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)Check if you run itEPSS 0.38%Sep 29, 2026
- Medium6.4A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend.Check if you run itEPSS 0.17%Sep 23, 2026
- Medium6.5A flaw was found in the automation-controller notification subsystem.Check if you run itEPSS 0.31%Sep 23, 2026
- Medium5.3ZDI-26-640: Oracle VirtualBox VirtioSCSI Uninitialized Memory Information Disclosure VulnerabilityCheck if you run itEPSS 0.14%Sep 9, 2026
- High7.5ZDI-26-639: Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.15%Sep 9, 2026
- Medium6.1ZDI-26-641: Oracle VirtualBox VirtioSCSI Out-Of-Bounds Read Information Disclosure VulnerabilityCheck if you run itEPSS 0.17%Sep 9, 2026
- High7.8ZDI-26-638: Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution VulnerabilityCheck if you run itEPSS 0.19%Sep 9, 2026
- High7.8ZDI-26-637: Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.19%Sep 9, 2026
- High7.8ZDI-26-636: Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.32%Sep 9, 2026
588 records · page 1 of 24
PreviousNext