Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data.Check if you run itEPSS 0.25%Mar 6, 2026
- Medium5.5Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data.Check if you run itEPSS 0.17%Mar 6, 2026
- Medium5.5Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information.Check if you run itEPSS 0.18%Mar 6, 2026
- Medium5.0An issue was discovered in Binutils before 2.46.Check if you run itEPSS 0.13%Mar 6, 2026
- High7.5The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns.Check if you run itEPSS 0.41%Mar 6, 2026
- Medium5.4Kestra is an event-driven orchestration platform.Check if you run itEPSS 0.24%Mar 6, 2026
- Critical9.8Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors.Check if you run itEPSS 0.39%Mar 6, 2026
- High8.2Zarf is an Airgap Native Packager Manager for Kubernetes.Check if you run itEPSS 0.23%Mar 6, 2026
- High7.5Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerat…Check if you run itEPSS 0.25%Mar 6, 2026
- High8.7Snipe-IT versions prior to 8.3.7 contain sensitive user attributes related to account privileges that are insufficiently protected against mass assignment.Check if you run itEPSS 0.48%Mar 6, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.26%Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.31%Mar 6, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.24%Mar 6, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.66%Mar 6, 2026
- High7.5CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 1.16%Mar 6, 2026
- Medium6.3CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.40%Mar 6, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.37%Mar 6, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.46%Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.27%Mar 6, 2026
- High7.5Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints.Check if you run itEPSS 0.54%Mar 6, 2026
- High7.5An Absolute Path Traversal vulnerability exists in Navtor NavBox.Check if you run itEPSS 0.48%Mar 6, 2026
- Medium5.3Navtor NavBox allows information disclosure via the /api/ais-data endpoint.Check if you run itEPSS 0.28%Mar 6, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.91%Mar 6, 2026
- Medium6.9OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious…Check if you run itEPSS 0.16%Mar 6, 2026
- High8.8OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multi…Check if you run itEPSS 0.38%Mar 6, 2026
Sort