Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.18%Oct 8, 2026
- Medium6.9A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Acce…Check if you run itEPSS 0.17%Oct 8, 2026
- High8.5An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API.Check if you run itEPSS 0.13%Oct 8, 2026
- High8.5An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.21%Oct 8, 2026
- High8.4An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.18%Oct 8, 2026
- High7.3An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.66%Oct 8, 2026
- High8.5A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.12%Oct 8, 2026
- High7.0An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 1.79%Oct 8, 2026
- High8.4An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.18%Oct 8, 2026
- High8.6An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 2.57%Oct 8, 2026
- High7.0An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10…Check if you run itEPSS 0.11%Oct 8, 2026
- Low2.1A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.11%Oct 8, 2026
- Medium6.8A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component…Check if you run itEPSS 0.14%Oct 8, 2026
- High7.5Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework…Check if you run itEPSS 0.39%Oct 8, 2026
- Medium5.3An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.18%Oct 8, 2026
- Medium6.8An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.11%Oct 8, 2026
- Medium4.1In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username t…Check if you run itEPSS 0.18%Oct 7, 2026
- Critical9.8In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Pr…Check if you run itEPSS 1.59%Oct 7, 2026
- High7.7In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could…Check if you run itEPSS 0.12%Oct 7, 2026
- HighLangflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersCheck if you run itEPSS 0.25%Oct 7, 2026
- UnknownCisco NX-OS Software Python Sandbox Escape VulnerabilityCheck if you run itEPSS 0.11%Oct 7, 2026
- Critical9.8The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users.Check if you run itEPSS 0.40%Oct 7, 2026
- Critical9.8Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transportOpen the advisoryOct 7, 2026
- High8.1ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len without first ch…Check if you run itEPSS 0.21%Oct 7, 2026
- High8.1Payload is a free and open source headless content management system.Check if you run itEPSS 0.48%Oct 6, 2026