Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.16%Apr 3, 2026
- Critical9.3Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote aCheck if you run itEPSS 0.83%Apr 3, 2026
- Medium6.1OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 1.65%Apr 3, 2026
- Medium5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.41%Apr 3, 2026
- Medium6.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.42%Apr 3, 2026
- Medium5.0OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.29%Apr 3, 2026
- Medium6.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.29%Apr 3, 2026
- Critical9.3Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass vulnerability in the master service that allows unauthenticated remote attackCheck if you run itEPSS 0.98%Apr 3, 2026
- Medium6.1Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.25%Apr 3, 2026
- Medium6.0OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL.Check if you run itEPSS 0.25%Apr 3, 2026
- High8.6prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and reCheck if you run itEPSS 0.34%Apr 3, 2026
- High7.1prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated users to perform arbiCheck if you run itEPSS 0.31%Apr 3, 2026
- High8.7prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metadata generation that aCheck if you run itEPSS 0.28%Apr 3, 2026
- Medium5.3prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform server-side fCheck if you run itEPSS 0.20%Apr 3, 2026
- High8.6prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the client system by craftingCheck if you run itEPSS 0.37%Apr 3, 2026
- High8.8Storage credentials are hardcoded in the mobile app and device firmware.Check if you run itEPSS 0.35%Apr 3, 2026
- Critical9.3A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.Check if you run itEPSS 0.30%Apr 3, 2026
- Critical9.2A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.Check if you run itEPSS 0.44%Apr 3, 2026
- High8.7Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allCheck if you run itEPSS 0.94%Apr 3, 2026
- Medium6.9A specific administrative endpoint notifications is accessible without proper authentication.Check if you run itEPSS 0.39%Apr 3, 2026
- High8.7A specific administrative endpoint is accessible without proper authentication, exposing device management functions.Check if you run itEPSS 0.49%Apr 3, 2026
- High7.0Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability in the execution of user-configured external applications that allows a local aCheck if you run itEPSS 0.12%Apr 3, 2026
- High7.3Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redCheck if you run itEPSS 0.28%Apr 3, 2026
- High7.1Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data thCheck if you run itEPSS 0.28%Apr 3, 2026
- High7.3OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by usinCheck if you run itEPSS 0.92%Apr 3, 2026
Sort