Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.Check if you run itEPSS 0.22%Mar 4, 2026
- Medium6.6erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json.Check if you run itEPSS 0.27%Mar 4, 2026
- High7.8Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.Check if you run itEPSS 0.24%Mar 4, 2026
- Medium5.3A logic error in the remove_password() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL) allows a low-privileged user to cause data loss.Check if you run itEPSS 0.20%Mar 4, 2026
- Medium6.3The server certificate was not verified when an Arc agent connected to a Guardian or CMC.Check if you run itEPSS 0.12%Mar 4, 2026
- Low2.0A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties.Check if you run itEPSS 0.21%Mar 4, 2026
- Low2.1A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter.Check if you run itEPSS 0.19%Mar 4, 2026
- High7.5Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability.Check if you run itEPSS 0.30%Mar 4, 2026
- Medium6.6Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFil…Check if you run itEPSS 0.31%Mar 4, 2026
- High7.8kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()Check if you run itEPSS 1.04%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability.Check if you run itEPSS 0.16%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.15%Mar 4, 2026
- High7.8Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privilege assignment vulnerability.Check if you run itEPSS 0.10%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.15%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability.Check if you run itEPSS 0.18%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability.Check if you run itEPSS 0.12%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.15%Mar 4, 2026
- Medium6.5The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the AJAX action with .Check if you run itEPSS 0.35%Mar 4, 2026
- Medium4.3The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the AJAX action with in all ve…Check if you run itEPSS 0.28%Mar 4, 2026
- Medium6.4The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attribute of the shortcode in all versions up to,…Check if you run itEPSS 0.30%Mar 4, 2026
- Medium6.5The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of d…Check if you run itEPSS 0.26%Mar 4, 2026
- Critical10.0Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 44.43%Mar 4, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.66%Mar 4, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.Check if you run itEPSS 0.28%Mar 4, 2026
- Medium6.1The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter in all versions up to, and including, 4.7.1 du…Check if you run itEPSS 0.27%Mar 4, 2026
Sort