Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files.Check if you run itEPSS 0.13%Mar 17, 2026
- Medium6.3The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates.Check if you run itEPSS 0.34%Mar 17, 2026
- Critical9.3The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.55%Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console.Check if you run itEPSS 0.34%Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files.Check if you run itEPSS 0.17%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 1.01%Mar 17, 2026
- Critical9.1Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 8.92%Mar 17, 2026
- Critical9.1### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver.Check if you run itEPSS 0.26%Mar 17, 2026
- High8.6This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.Check if you run itEPSS 0.59%Mar 17, 2026
- High8.7A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup…Check if you run itEPSS 0.34%Mar 17, 2026
- High7.1An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.Check if you run itEPSS 0.22%Mar 17, 2026
- Medium4.3Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.24%Mar 17, 2026
- High8.8Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.32%Mar 17, 2026
- High8.6Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH.Check if you run itEPSS 1.57%Mar 17, 2026
- High8.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.24%Mar 17, 2026
- High7.4A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114.Check if you run itEPSS 0.52%Mar 17, 2026
- Medium6.8NULL Pointer Dereference vulnerability in Softing Industrial Automation GmbH smartLink SW-HT (Webserver modules) allows HTTP DoS.This issue affects smartLink SW-HT: 1.43.Check if you run itEPSS 0.33%Mar 17, 2026
- Medium5.4A flaw was found in the Katello plugin for Red Hat Satellite.Check if you run itEPSS 0.27%Mar 17, 2026
- High7.8Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configu…Check if you run itEPSS 1.38%Mar 17, 2026
- Medium6.1HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage.Check if you run itEPSS 0.16%Mar 17, 2026
- High7.5A flaw was found in libsoup, a library for handling HTTP requests.Check if you run itEPSS 0.86%Mar 17, 2026
- Low2.7HCL Sametime is vulnerable to broken server-side validation.Check if you run itEPSS 0.20%Mar 17, 2026
- High8.1Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated…Check if you run itEPSS 0.56%Mar 17, 2026
- High7.5Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.Check if you run itEPSS 0.70%Mar 17, 2026
- Medium4.3Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs.Check if you run itEPSS 0.46%Mar 17, 2026
Sort