Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.6Exposure of resource to wrong sphere in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure.Check if you run itEPSS 0.11%Mar 10, 2026
- High8.7Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.14%Mar 10, 2026
- Low1.8Improper buffer restrictions in the UEFI DXE module for some Intel(R) Reference Platforms within UEFI may allow an information disclosure.Check if you run itEPSS 0.11%Mar 10, 2026
- High7.1Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.12%Mar 10, 2026
- High8.7Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.12%Mar 10, 2026
- High7.1Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.09%Mar 10, 2026
- High7.1Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.12%Mar 10, 2026
- Medium5.7Improper buffer restrictions in some UEFI firmware for some Intel(R) reference platforms may allow an escalation of privilege.Check if you run itEPSS 0.11%Mar 10, 2026
- Medium5.9Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege.Check if you run itEPSS 0.15%Mar 10, 2026
- High8.7Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.44%Mar 10, 2026
- High8.7Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol.Check if you run itEPSS 0.57%Mar 10, 2026
- Critical9.4Improper Authorization vulnerability in nerves-hub nerves_hub_web allows cross-organization device control via device bulk actions and device update API.Check if you run itEPSS 0.48%Mar 10, 2026
- Medium5.5Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Se…Check if you run itEPSS 0.12%Mar 10, 2026
- Medium6.9Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.25%Mar 10, 2026
- High7.2Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.38%Mar 10, 2026
- Medium6.7Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.30%Mar 10, 2026
- Medium5.4Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.21%Mar 10, 2026
- High7.5sigstore-ruby is a pure Ruby implementation of the sigstore verify command from the sigstore/cosign project.Check if you run itEPSS 0.28%Mar 10, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 2.69%Mar 10, 2026
- Medium6.0Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.49%Mar 10, 2026
- High7.8Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the conCheck if you run itEPSS 0.26%Mar 10, 2026
- High7.8Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the conCheck if you run itEPSS 0.42%Mar 10, 2026
- High7.1Alienbin is an anonymous code and text sharing web service.Check if you run itEPSS 0.21%Mar 10, 2026
- Medium6.8pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.20%Mar 10, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal.Check if you run itEPSS 1.17%Mar 10, 2026
Sort