Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.41%Mar 10, 2026
- High8.2Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.32%Mar 10, 2026
- Medium5.3An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with a classic personal access token (PAT) lacking the repo sCheck if you run itEPSS 0.29%Mar 10, 2026
- High7.4An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task list content.Check if you run itEPSS 0.21%Mar 10, 2026
- Critical9.1MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Check this weekEPSS 12.25%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.15%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Check if you run itEPSS 0.17%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.15%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.Check if you run itEPSS 0.17%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.15%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.15%Mar 10, 2026
- High8.2MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Check this weekEPSS 13.85%Mar 10, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.20%Mar 10, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCheck if you run itEPSS 0.17%Mar 10, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCheck if you run itEPSS 0.17%Mar 10, 2026
- Critical9.8, an interface for running git commands in any node.js application, has an issue in versions 3.15.0 through 3.32.2 that allows an attacker to bypass two prior CVE fixes (CVE-2022-2Check if you run itEPSS 1.44%Mar 10, 2026
- High7.8Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated meCheck if you run itEPSS 0.19%Mar 10, 2026
- Medium5.5DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.20%Mar 10, 2026
- High7.8DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.24%Mar 10, 2026
- Critical9.3Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module.Check if you run itEPSS 0.84%Mar 10, 2026
- Medium6.6A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all ver…Check if you run itEPSS 0.73%Mar 10, 2026
- High7.5Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privileg…Check if you run itEPSS 0.95%Mar 10, 2026
- High8.1External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.39%Mar 10, 2026
- Medium4.7Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information…Check if you run itEPSS 1.39%Mar 10, 2026
- High7.8Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.38%Mar 10, 2026
Sort