Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.5Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module).CVE-2026-89077 · Progress · MOVEit Transfer · CIRCL Vulnerability Lookup · CVE.org · NIST NVDOct 14, 2026
High8.7NGINX Ingress Controller vulnerabilityCVE-2026-104939 · F5 · NGINX Ingress Controller · CIRCL Vulnerability Lookup · CVE.org · NIST NVD · nginxOct 14, 2026
High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in c…CVE-2026-85972 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 12, 2026
High8.4Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNM…CVE-2025-4676 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Jan 7, 2026
High8.3Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0…CVE-2025-14273 · mattermost · mattermost server · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Dec 22, 2025
Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityCVE-2024-7593 · ivanti · virtual traffic manager · CISA KEV · CVE.org · FIRST EPSS · ivantiKEVEPSS 100.0%Aug 13, 2024
Critical9.8Microsoft SharePoint Server Privilege Escalation VulnerabilityCVE-2023-29357 · microsoft · sharepoint server · CISA KEV · CVE.org · FIRST EPSS · microsoftKEVEPSS 100.0%Jun 13, 2023