Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow…Check if you run itEPSS 0.35%Mar 17, 2026
- Medium6.3A vulnerability was determined in Duende IdentityServer4 up to 4.1.2.Check if you run itEPSS 0.42%Mar 17, 2026
- High7.1Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by a…Check if you run itEPSS 0.22%Mar 17, 2026
- Critical9.2Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface.Check if you run itEPSS 0.61%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inje…Check if you run itEPSS 0.22%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrat…Check if you run itEPSS 0.22%Mar 17, 2026
- High8.7Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption.Check if you run itEPSS 0.15%Mar 17, 2026
- High7.5IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.Check if you run itEPSS 0.53%Mar 17, 2026
- Medium6.5IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of pr…Check if you run itEPSS 0.34%Mar 17, 2026
- Medium5.7IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing and serving sensitive, user-specific responses as…Check if you run itEPSS 0.30%Mar 17, 2026
- Medium6.7Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.16%Mar 17, 2026
- Low2.0A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.Check if you run itEPSS 0.19%Mar 17, 2026
- Medium6.1A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-ba…Check if you run itEPSS 0.36%Mar 17, 2026
- High8.5Improper trust boundary enforcement in Kiro IDE before version 0.8.0 on all supported platforms might allow a remote unauthenticated threat actor to execute arbitrary…Check if you run itEPSS 0.21%Mar 17, 2026
- High8.3Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass rol…Check if you run itEPSS 0.34%Mar 17, 2026
- Medium5.5Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or mo…Check if you run itEPSS 0.35%Mar 17, 2026
- High8.7A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1.Check if you run itEPSS 0.95%Mar 17, 2026
- Medium5.1miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allow…Check if you run itEPSS 0.23%Mar 17, 2026
- Medium6.9dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_a…Check if you run itEPSS 0.19%Mar 17, 2026
- High8.1An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026.Check if you run itEPSS 0.34%Mar 17, 2026
- High8.8GLPI is a free Asset and IT management software package.Check if you run itEPSS 0.35%Mar 17, 2026
- Medium6.8Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.11%Mar 17, 2026
- High8.7Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.Check if you run itEPSS 0.29%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.40%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.33%Mar 17, 2026
Sort