Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Sensitive information disclosure due to improper authorization checks.Check if you run itEPSS 0.32%Mar 6, 2026
- Medium4.8Unnecessary transmission of sensitive cryptographic material.Check if you run itEPSS 0.18%Mar 6, 2026
- High7.1Default credentials set for local privileged user in Virtual Appliance.Check if you run itEPSS 0.20%Mar 6, 2026
- Medium6.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.10%Mar 6, 2026
- Medium6.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.10%Mar 6, 2026
- Critical9.8Sensitive information disclosure and manipulation due to improper authentication.Check if you run itEPSS 0.47%Mar 6, 2026
- Medium4.3Unauthorized resource manipulation due to improper authorization checks.Check if you run itEPSS 0.18%Mar 6, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.66%Mar 6, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.33%Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.43%Mar 6, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.98%Mar 6, 2026
- Medium4.4Credentials are not deleted from Acronis Agent after plan revocation.Check if you run itEPSS 0.17%Mar 6, 2026
- High7.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.13%Mar 6, 2026
- High7.1Sensitive information disclosure and manipulation due to insufficient authorization checks.Check if you run itEPSS 0.11%Mar 6, 2026
- Medium4.4Credentials are not deleted from Acronis Agent after plan revocation.Check if you run itEPSS 0.13%Mar 6, 2026
- Critical9.8Payment Orchestrator Service Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.17%Mar 5, 2026
- Medium6.7'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.46%Mar 5, 2026
- Medium6.5Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.01%Mar 5, 2026
- Medium6.7Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.59%Mar 5, 2026
- Critical9.8Microsoft Devices Pricing Program Remote Code Execution VulnerabilityCheck if you run itEPSS 1.60%Mar 5, 2026
- Low1.9A vulnerability has been found in Ettercap 0.8.4-Garofalo.Check if you run itEPSS 0.18%Mar 5, 2026
- Medium6.4The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post meta value and the block attribute in…Check if you run itEPSS 0.22%Mar 5, 2026
- High8.2OpenClaw versions prior to 2026.2.12 contain a vulnerability in the BlueBubbles (optional plugin) webhook handler in which it authenticates requests based solely on lo…Check if you run itEPSS 0.46%Mar 5, 2026
- Medium6.8OpenClaw versions prior to 2026.2.14 decode base64-backed media inputs into buffers before enforcing decoded-size budget limits, allowing attackers to trigger large me…Check if you run itEPSS 0.31%Mar 5, 2026
- High8.2OpenClaw versions prior to 2026.2.14 contain a local file inclusion vulnerability in BlueBubbles extension (must be installed and enabled) media path handling that all…Check if you run itEPSS 0.34%Mar 5, 2026
Sort