Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.36%Mar 17, 2026
- High8.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.27%Mar 17, 2026
- High8.6Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH.Check if you run itEPSS 1.75%Mar 17, 2026
- High7.4A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114.Check if you run itEPSS 0.58%Mar 17, 2026
- Medium6.8NULL Pointer Dereference vulnerability in Softing Industrial Automation GmbH smartLink SW-HT (Webserver modules) allows HTTP DoS.This issue affects smartLink SW-HT: 1.43.Check if you run itEPSS 0.35%Mar 17, 2026
- High7.8Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configu…Check if you run itEPSS 1.43%Mar 17, 2026
- Medium5.4A flaw was found in the Katello plugin for Red Hat Satellite.Check if you run itEPSS 0.30%Mar 17, 2026
- Medium6.1HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage.Check if you run itEPSS 0.19%Mar 17, 2026
- Low2.7HCL Sametime is vulnerable to broken server-side validation.Check if you run itEPSS 0.23%Mar 17, 2026
- High7.5A flaw was found in libsoup, a library for handling HTTP requests.Check if you run itEPSS 0.94%Mar 17, 2026
- Medium4.3Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs.Check if you run itEPSS 0.52%Mar 17, 2026
- Medium6.5Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to "~" (wildcardCheck if you run itEPSS 0.47%Mar 17, 2026
- High8.1Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instancCheck if you run itEPSS 0.61%Mar 17, 2026
- High7.5Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.Check if you run itEPSS 0.79%Mar 17, 2026
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.22%Mar 17, 2026
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.27%Mar 17, 2026
- Medium5.5A flaw was found in libsoup, a library used by applications to send network requests.Check if you run itEPSS 0.25%Mar 17, 2026
- High7.7The extension fails to properly reset the generated MFA code after successful authentication.Check if you run itEPSS 0.30%Mar 17, 2026
- Low2.3The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.Check if you run itEPSS 0.19%Mar 17, 2026
- Medium5.3Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…Check if you run itEPSS 0.26%Mar 17, 2026
- Medium5.2The extension fails to properly define allowed classes used when deserializing transport failure metadata.Check if you run itEPSS 0.26%Mar 17, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missing from the auCheck if you run itEPSS 0.15%Mar 17, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class fchmodat2(), introduced in version 6.6 is currently not in theCheck if you run itEPSS 0.14%Mar 17, 2026
- Critical9.3GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to…Check if you run itEPSS 0.52%Mar 17, 2026
- Low2.3In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expiration and revocation time…Check if you run itEPSS 0.18%Mar 17, 2026
Sort