Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows l…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium6.9Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenti…Check if you run itEPSS 0.20%Apr 1, 2026
- High8.6An improper access check allows unauthorized access to webservice endpoints.Check if you run itEPSS 0.41%Apr 1, 2026
- Medium5.9Lack of output escaping for article titles leads to XSS vectors in various locations.Check if you run itEPSS 0.19%Apr 1, 2026
- Medium5.9Lack of output escaping leads to a XSS vector in the multilingual associations component.Check if you run itEPSS 0.22%Apr 1, 2026
- Medium6.9Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.Check if you run itEPSS 0.35%Apr 1, 2026
- Medium6.3The ajax component was excluded from the default logged-in-user check in the administrative area.Check if you run itEPSS 0.26%Apr 1, 2026
- Low2.1A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium5.3Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause s…Check if you run itEPSS 0.38%Apr 1, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows…Check if you run itEPSS 0.18%Apr 1, 2026
- High8.6Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism.Check if you run itEPSS 0.46%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to i_private dataCheck if you run itEPSS 0.15%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is a race condition that leads to a use-after-free situation: beCheck if you run itEPSS 0.14%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: fix differential encoding verification Differential encoding allows loops to be created if it is abuseCheck if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix double free of ns_name in aa_replace_profiles() if ns_name is NULL after 1071 error = aa_unpack(udCheck if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verify_dfa() The verify_dfa() function only checks DEFAULCheck if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in match_char() macro usage The match_char() macro evaluates its character parametCheck if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: fix: limit the number of levels of policy namespaces Currently the number of policy namespaces is notCheck if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses recursion whenCheck if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets on every call, leaking the namespace string allocatCheck if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Adjust KVM's sanity check against ovCheck if you run itEPSS 0.17%Apr 1, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPCheck if you run itEPSS 0.19%Apr 1, 2026
- Low2.1A vulnerability was determined in AutohomeCorp frostmourne up to 1.0.Check if you run itEPSS 0.21%Apr 1, 2026
- High7.1PowerStore, contains a Path Traversal vulnerability in the Service user.Check if you run itEPSS 0.12%Apr 1, 2026
- High7.2Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Di…Check if you run itEPSS 0.40%Apr 1, 2026
Sort