Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Gladinet Triofox Improper Access Control VulnerabilityPatch nowKEVEPSS 95.75%Nov 10, 2025
- High7.8Microsoft Windows Improper Access Control VulnerabilityPatch nowKEVEPSS 2.66%Oct 14, 2025
- High8.6There is an Access Control Vulnerability in some HikCentral Professional versions.Open the advisoryAug 29, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- High7.5Vite Vitejs Improper Access Control VulnerabilityPatch nowKEVEPSS 65.19%Mar 31, 2025
- Medium6.5Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an or…Check if you run itEPSS 0.69%Feb 25, 2025
- High8.8Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.Check if you run itEPSS 0.69%Feb 25, 2025
- Critical9.8Microsoft Power Pages Improper Access Control VulnerabilityPatch nowKEVEPSS 1.62%Feb 19, 2025
- Medium6.1The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly r…Check if you run itEPSS 0.18%Feb 18, 2025
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Command Execution VulnerabilityPatch nowKEVEPSS 99.91%Oct 1, 2024
- Critical9.8SonicWall SonicOS Improper Access Control VulnerabilityPatch nowKEVEPSS 18.38%Apr 23, 2024
- Critical9.8Apache HugeGraph-Server Improper Access Control VulnerabilityPatch nowKEVEPSS 99.21%Apr 22, 2024
- High7.4Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 98.51%Mar 18, 2024
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityPatch nowKEVEPSS 94.65%Jan 12, 2024
- Medium5.5In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.Check if you run itEPSS 0.43%Dec 18, 2023
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 99.76%Jul 20, 2023
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityPatch nowKEVEPSS 99.79%Jul 12, 2023
- Critical9.8Citrix Content Collaboration ShareFile Improper Access Control VulnerabilityPatch nowKEVEPSS 97.34%Jul 10, 2023
- High8.1Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstrat…Check if you run itEPSS 0.84%Apr 25, 2023
- Medium4.3Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notificat…Check if you run itEPSS 0.46%Apr 25, 2023
- Medium6.5Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the de…Check if you run itEPSS 0.69%Apr 25, 2023
- High7.5Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports…Check if you run itEPSS 0.88%Apr 25, 2023
- High7.5Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment m…Check if you run itEPSS 0.56%Apr 25, 2023
- Medium6.5Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated u…Check if you run itEPSS 0.79%Apr 25, 2023
- Critical9.8PaperCut MF/NG Improper Access Control VulnerabilityPatch nowKEVEPSS 100.00%Apr 18, 2023