Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 2.32%Mar 18, 2026
- Low1.7pyOpenSSL is a Python wrapper around the OpenSSL library.Check if you run itEPSS 0.28%Mar 18, 2026
- Medium5.7Sentry is a developer-first error tracking and performance monitoring tool.Check if you run itEPSS 0.28%Mar 18, 2026
- High8.8The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents.Check if you run itEPSS 0.25%Mar 18, 2026
- Medium6.5GLPI is a free Asset and IT management software package.Check if you run itEPSS 0.33%Mar 18, 2026
- Medium6.1A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-dCheck if you run itEPSS 0.21%Mar 18, 2026
- High8.2Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension bCheck if you run itEPSS 0.72%Mar 18, 2026
- High7.2pyOpenSSL is a Python wrapper around the OpenSSL library.Check if you run itEPSS 0.80%Mar 17, 2026
- Critical9.1IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the inte…Check if you run itEPSS 0.17%Mar 17, 2026
- High7.5Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed t…Check if you run itEPSS 0.21%Mar 17, 2026
- Critical9.8Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop).Check if you run itEPSS 0.52%Mar 17, 2026
- Medium6.5IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote…Check if you run itEPSS 0.20%Mar 17, 2026
- High7.5IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow…Check if you run itEPSS 0.39%Mar 17, 2026
- Medium5.4A cross-origin issue in the Navigation API was addressed with improved input validation.Check if you run itEPSS 0.37%Mar 17, 2026
- Medium6.3A vulnerability was determined in Duende IdentityServer4 up to 4.1.2.Check if you run itEPSS 0.46%Mar 17, 2026
- High7.5IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.Check if you run itEPSS 0.57%Mar 17, 2026
- Medium6.5IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of pr…Check if you run itEPSS 0.37%Mar 17, 2026
- Medium5.7IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing and serving sensitive, user-specific responses as…Check if you run itEPSS 0.34%Mar 17, 2026
- High8.7Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption.Check if you run itEPSS 0.15%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrative actions bCheck if you run itEPSS 0.24%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inject arbitraryCheck if you run itEPSS 0.25%Mar 17, 2026
- High7.1Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing confCheck if you run itEPSS 0.23%Mar 17, 2026
- Critical9.2Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface.Check if you run itEPSS 0.66%Mar 17, 2026
- Medium6.7Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.18%Mar 17, 2026
- Low2.0A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.Check if you run itEPSS 0.25%Mar 17, 2026
Sort