Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.72%Apr 2, 2026
- Critical10.0Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.93%Apr 2, 2026
- High8.7Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TCheck if you run itEPSS 0.46%Apr 2, 2026
- High8.7Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment.Check if you run itEPSS 0.44%Apr 2, 2026
- Critical9.2HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to rebCheck if you run itEPSS 0.52%Apr 2, 2026
- High7.5The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.Check if you run itEPSS 0.24%Apr 2, 2026
- Medium6.1XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API servicesCheck if you run itEPSS 0.21%Apr 2, 2026
- Critical9.3Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gCheck if you run itEPSS 0.46%Apr 2, 2026
- High8.5Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01 prior to 08.3.02 contain an arbitrary code execution vulnerability triggered when an administrator opens a maliciousCheck if you run itEPSS 0.14%Apr 2, 2026
- High8.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.38%Apr 2, 2026
- Medium5.4hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.15%Apr 2, 2026
- High8.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.29%Apr 2, 2026
- Medium6.1hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.40%Apr 2, 2026
- Critical10.0Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 1.04%Apr 2, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.26%Apr 2, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.17%Apr 2, 2026
- Medium6.5Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.32%Apr 2, 2026
- High8.5NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Check if you run itEPSS 0.41%Apr 2, 2026
- Medium6.9Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages.Check if you run itEPSS 0.29%Apr 2, 2026
- Low2.7Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.19%Apr 2, 2026
- Medium6.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.33%Apr 2, 2026
- Low2.0A security flaw has been discovered in Shinrays Games Goods Triple App up to 1.200.Check if you run itEPSS 0.10%Apr 2, 2026
- High7.1vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.28%Apr 2, 2026
- Critical9.2OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.56%Apr 2, 2026
- High8.1OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.27%Apr 2, 2026
Sort