Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Check if you run itEPSS 0.31%Mar 17, 2026
- High7.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Check if you run itEPSS 0.31%Mar 17, 2026
- High7.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Check if you run itEPSS 0.31%Mar 17, 2026
- High7.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Check if you run itEPSS 0.31%Mar 17, 2026
- High7.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Check if you run itEPSS 0.31%Mar 17, 2026
- High7.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Check if you run itEPSS 0.31%Mar 17, 2026
- Medium6.9dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metCheck if you run itEPSS 0.21%Mar 17, 2026
- Medium5.1miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers tCheck if you run itEPSS 0.26%Mar 17, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Food Order System 1.0.Check if you run itEPSS 0.38%Mar 17, 2026
- High8.5The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.Check if you run itEPSS 0.66%Mar 17, 2026
- Critical9.3The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries.Check if you run itEPSS 0.58%Mar 17, 2026
- High8.8Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change t…Check if you run itEPSS 0.56%Mar 17, 2026
- Critical9.3JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.54%Mar 17, 2026
- High7.0JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files.Check if you run itEPSS 0.14%Mar 17, 2026
- Medium6.3The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates.Check if you run itEPSS 0.35%Mar 17, 2026
- Critical9.3The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.58%Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console.Check if you run itEPSS 0.37%Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files.Check if you run itEPSS 0.18%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 1.10%Mar 17, 2026
- Critical9.1Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 9.96%Mar 17, 2026
- Critical9.1### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver.Check if you run itEPSS 0.29%Mar 17, 2026
- High8.6This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.Check if you run itEPSS 0.66%Mar 17, 2026
- High8.7A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup…Check if you run itEPSS 0.38%Mar 17, 2026
- High7.1An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.Check if you run itEPSS 0.25%Mar 17, 2026
- Medium4.3Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.27%Mar 17, 2026
Sort