Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Unauthorized report deletion due to insufficient access control.Check if you run itEPSS 0.18%Mar 5, 2026
- High7.3Local privilege escalation due to improper soft link handling.Check if you run itEPSS 0.16%Mar 5, 2026
- High7.3Local privilege escalation due to improper soft link handling.Check if you run itEPSS 0.16%Mar 5, 2026
- Medium4.3Unauthorized modification of settings due to insufficient authorization checks.Check if you run itEPSS 0.18%Mar 5, 2026
- Medium4.3Unauthorized resource manipulation due to improper authorization checks.Check if you run itEPSS 0.18%Mar 5, 2026
- High7.5Denial of service due to insufficient input validation in authentication logging.Check if you run itEPSS 0.39%Mar 5, 2026
- Medium5.0Local privilege escalation due to improper directory permissions.Check if you run itEPSS 0.13%Mar 5, 2026
- Medium4.4Information disclosure and manipulation due to improper authorization checks.Check if you run itEPSS 0.11%Mar 5, 2026
- Medium6.5Sensitive information disclosure due to improper authorization checks.Check if you run itEPSS 0.32%Mar 5, 2026
- Medium4.8Unnecessary transmission of sensitive cryptographic material.Check if you run itEPSS 0.18%Mar 5, 2026
- High7.1Default credentials set for local privileged user in Virtual Appliance.Check if you run itEPSS 0.20%Mar 5, 2026
- Medium6.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.10%Mar 5, 2026
- Medium6.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.10%Mar 5, 2026
- Critical9.8Sensitive information disclosure and manipulation due to improper authentication.Check if you run itEPSS 0.47%Mar 5, 2026
- Medium4.3Unauthorized resource manipulation due to improper authorization checks.Check if you run itEPSS 0.18%Mar 5, 2026
- Medium4.4Credentials are not deleted from Acronis Agent after plan revocation.Check if you run itEPSS 0.13%Mar 5, 2026
- High7.1Sensitive information disclosure and manipulation due to insufficient authorization checks.Check if you run itEPSS 0.11%Mar 5, 2026
- High7.3Local privilege escalation due to DLL hijacking vulnerability.Check if you run itEPSS 0.13%Mar 5, 2026
- High7.8Local privilege escalation due to insecure Unix socket permissions.Check if you run itEPSS 0.11%Mar 5, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.33%Mar 5, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.43%Mar 5, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.66%Mar 5, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 via the automatCheck if you run itEPSS 0.27%Mar 5, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.98%Mar 5, 2026
- Critical9.8Payment Orchestrator Service Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.17%Mar 5, 2026
Sort