Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy.Check if you run itEPSS 0.61%Mar 13, 2026
- Medium6.3Malicious configuration can lead to unauthorized file access in Apache Livy.Check if you run itEPSS 0.50%Mar 13, 2026
- Medium6.4A container privilege escalation flaw was found in certain Fuse images.Check if you run itEPSS 0.22%Mar 13, 2026
- High7.2IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, and 6.2.1.0 through 6.2.1.1_1 are vulnerable to SQL injection.Check if you run itEPSS 0.33%Mar 13, 2026
- Medium6.9The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability.Check if you run itEPSS 0.17%Mar 13, 2026
- Medium5.9IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query stri…Check if you run itEPSS 0.22%Mar 13, 2026
- Medium5.4IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 is vulnerable to…Check if you run itEPSS 0.22%Mar 13, 2026
- Medium6.5IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could disclose s…Check if you run itEPSS 0.26%Mar 13, 2026
- High7.2Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.Check if you run itEPSS 0.28%Mar 13, 2026
- High7.1Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.Check if you run itEPSS 0.27%Mar 13, 2026
- High7.2Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.Check if you run itEPSS 0.23%Mar 13, 2026
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information when detailed…Check if you run itEPSS 0.35%Mar 13, 2026
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive user information using an expir…Check if you run itEPSS 0.18%Mar 13, 2026
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information in cleartext…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.4IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 is vulnerable to cross-site scripting.Check if you run itEPSS 0.22%Mar 13, 2026
- Medium5.1Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.Check if you run itEPSS 0.32%Mar 13, 2026
- Medium5.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.4IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, and 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1 are vulnerable to cross-s…Check if you run itEPSS 0.22%Mar 13, 2026
- High7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveCheck if you run itEPSS 0.72%Mar 13, 2026
- Critical10.0The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration.Check if you run itEPSS 5.72%Mar 12, 2026
- Medium5.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS).Check if you run itEPSS 0.59%Mar 12, 2026
- High7.5undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameterCheck if you run itEPSS 0.91%Mar 12, 2026
- High7.5ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length.Check if you run itEPSS 0.51%Mar 12, 2026
- Medium4.6ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary H…Check if you run itEPSS 0.29%Mar 12, 2026
Sort