Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.0An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved.Check if you run itEPSS 0.18%Apr 7, 2026
- Low2.2An issue that could expose task information outside of the authorized organization scope has been resolved.Check if you run itEPSS 0.18%Apr 7, 2026
- Medium5.3An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved.Check if you run itEPSS 0.20%Apr 7, 2026
- Low3.0An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope has been resolved.Check if you run itEPSS 0.12%Apr 7, 2026
- Medium6.8An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved.Check if you run itEPSS 0.19%Apr 7, 2026
- Medium5.9An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved.Check if you run itEPSS 0.22%Apr 7, 2026
- Low2.7An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved.Check if you run itEPSS 0.20%Apr 7, 2026
- Medium5.8An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved.Check if you run itEPSS 0.22%Apr 7, 2026
- High8.4An issue that allowed all-organization administrators to promote accounts to superuser status has been resolved.Check if you run itEPSS 0.22%Apr 7, 2026
- Medium6.4An issue that allowed a SQL injection attack vector related to saved queries (introduced in version 4.0.260123.0).Check if you run itEPSS 0.21%Apr 7, 2026
- Critical9.8A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b.Check if you run itEPSS 0.64%Apr 7, 2026
- Critical9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b.Check if you run itEPSS 1.41%Apr 7, 2026
- Critical9.8A heap-based buffer overflow vulnerability exists in the x3f_thumb_loader functionality of LibRaw Commit d20315b.Check if you run itEPSS 0.84%Apr 7, 2026
- High8.1A heap-based buffer overflow vulnerability exists in the x3f_load_huffman functionality of LibRaw Commit d20315b.Check if you run itEPSS 0.72%Apr 7, 2026
- Critical9.8An integer overflow vulnerability exists in the uncompressed_fp_dng_load_raw functionality of LibRaw Commit 8dc68e2.Check if you run itEPSS 0.59%Apr 7, 2026
- Critical9.8An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2.Check if you run itEPSS 0.59%Apr 7, 2026
- High8.5Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (bet…Check if you run itEPSS 0.23%Apr 7, 2026
- High8.7A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.Check if you run itEPSS 0.45%Apr 7, 2026
- Critical9.1A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the component.Check if you run itEPSS 0.82%Apr 7, 2026
- Medium5.3MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts.Check if you run itEPSS 0.38%Apr 7, 2026
- Medium5.1MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface.Check if you run itEPSS 0.23%Apr 7, 2026
- Critical9.8Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1.Check if you run itEPSS 0.27%Apr 7, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1.Check if you run itEPSS 0.34%Apr 7, 2026
- High8.8Incorrect boundary conditions in the Graphics: WebGPU component.Check if you run itEPSS 0.32%Apr 7, 2026
- High8.8Incorrect boundary conditions, integer overflow in the Graphics: Text component.Check if you run itEPSS 0.36%Apr 7, 2026
Sort