Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces.Check if you run itEPSS 0.15%Mar 18, 2026
- Medium5.4A cross-origin issue in the Navigation API was addressed with improved input validation.Check if you run itEPSS 0.36%Mar 17, 2026
- Low2.7HCL Sametime is vulnerable to broken server-side validation.Check if you run itEPSS 0.20%Mar 17, 2026
- Medium6.0The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete.Check if you run itEPSS 0.50%Mar 16, 2026
- Critical9.1Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.Check if you run itEPSS 0.31%Mar 16, 2026
- Medium5.5in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.Check if you run itEPSS 0.15%Mar 16, 2026
- Low3.3in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input.Check if you run itEPSS 0.14%Mar 16, 2026
- Medium5.3Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access.Check if you run itEPSS 0.38%Mar 16, 2026
- Medium6.3wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the commen…Check if you run itEPSS 0.23%Mar 13, 2026
- High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.Check if you run itEPSS 1.02%Mar 13, 2026
- Medium6.3Malicious configuration can lead to unauthorized file access in Apache Livy.Check if you run itEPSS 0.50%Mar 13, 2026
- Low2.0The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK.Check if you run itEPSS 0.17%Mar 12, 2026
- Low2.1A flaw has been found in Alfresco Activiti up to 7.19/8.8.0.Check if you run itEPSS 0.46%Mar 12, 2026
- High8.7Black is the uncompromising Python code formatter.Check if you run itEPSS 0.66%Mar 11, 2026
- High7.8Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.Check if you run itEPSS 0.15%Mar 11, 2026
- Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that c…Check if you run itEPSS 0.31%Mar 11, 2026
- Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that c…Check if you run itEPSS 0.53%Mar 11, 2026
- High8.7Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.12%Mar 10, 2026
- Medium5.9Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege.Check if you run itEPSS 0.14%Mar 10, 2026
- High7.1Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.10%Mar 10, 2026
- High8.7Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.11%Mar 10, 2026
- High7.1Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.10%Mar 10, 2026
- High8.4In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation.Check if you run itEPSS 0.09%Mar 10, 2026
- High7.5Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.47%Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.06%Mar 10, 2026