Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.Check if you run itEPSS 0.65%Apr 7, 2026
- Medium5.5Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via ~/.cassa…Check if you run itEPSS 0.19%Apr 7, 2026
- High8.8Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certi…Check if you run itEPSS 0.34%Apr 7, 2026
- High8.7A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.Check if you run itEPSS 0.65%Apr 7, 2026
- Medium4.3Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web,…Check if you run itEPSS 0.68%Apr 7, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 15.49%Apr 7, 2026
- UnknownSecurity exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.cloneOpen the advisoryApr 7, 2026
- High8.7VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into th…Check if you run itEPSS 0.66%Apr 5, 2026
- High7.5Apache Traffic Server allows request smuggling if chunked messages are malformed.Check if you run itEPSS 0.43%Apr 2, 2026
- High7.5A bug in POST request handling causes a crash under a certain condition.Check if you run itEPSS 0.67%Apr 2, 2026
- High7.5Admidio is an open-source user management solution.Check if you run itEPSS 0.52%Mar 31, 2026
- Medium4.8Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks.Check if you run itEPSS 0.43%Mar 30, 2026
- UnknownSecurity exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCIIOpen the advisoryMar 28, 2026
- Critical9.1A flaw was found in Undertow.Check if you run itEPSS 0.89%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.Check if you run itEPSS 0.89%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.Check if you run itEPSS 0.89%Mar 27, 2026
- Medium5.3Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new messa…Check if you run itEPSS 0.50%Mar 24, 2026
- Low2.3Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a…Check if you run itEPSS 0.56%Mar 24, 2026
- Medium5.9Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.Check if you run itEPSS 0.24%Mar 24, 2026
- High7.5Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.Check if you run itEPSS 0.31%Mar 24, 2026
- High8.8The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on import_popup_templates() function as well as insufficient…Check if you run itEPSS 0.95%Mar 24, 2026
- High8.8FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.74%Mar 20, 2026
- High7.5VU#948176: Multiple TLS Libraries can Bypass Delegation EnforcementCheck if you run itEPSS 0.46%Mar 19, 2026
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 3.13%Mar 18, 2026
- High8.1Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated…Check if you run itEPSS 0.74%Mar 17, 2026