Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Craft is a content management system (CMS).Check if you run itEPSS 0.49%Mar 4, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.82%Mar 4, 2026
- High7.5Craft is a content management system (CMS).Check if you run itEPSS 0.66%Mar 4, 2026
- High7.0Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default.Check if you run itEPSS 0.55%Mar 4, 2026
- Medium4.3A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-basedCheck if you run itEPSS 0.16%Mar 4, 2026
- Medium4.3A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3).Check if you run itEPSS 0.17%Mar 4, 2026
- Medium4.3A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-Fi frame that causes an Access Point (AP) to classify the frCheck if you run itEPSS 0.20%Mar 4, 2026
- High7.6A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs.Check if you run itEPSS 0.29%Mar 4, 2026
- High8.1A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on aCheck if you run itEPSS 0.29%Mar 4, 2026
- Medium5.4A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions.Check if you run itEPSS 0.09%Mar 4, 2026
- Medium4.4Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability.Check if you run itEPSS 0.12%Mar 4, 2026
- Medium5.32N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handlCheck if you run itEPSS 0.22%Mar 4, 2026
- Medium6.02N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.Check if you run itEPSS 0.29%Mar 4, 2026
- Medium5.3Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption.Check if you run itEPSS 0.21%Mar 4, 2026
- Medium6.92N Access Commander version 3.4.1 and prior is vulnerable to log pollution.Check if you run itEPSS 0.33%Mar 4, 2026
- Medium6.5A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etCheck if you run itEPSS 0.51%Mar 4, 2026
- High8.8API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection.Check if you run itEPSS 1.00%Mar 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: romfs: check sb_set_blocksize() return value romfs_fill_super() ignores the return value of sb_set_…Check if you run itEPSS 0.21%Mar 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a few places in the Classmate la…Check if you run itEPSS 0.21%Mar 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTL_REPORT_DAMAGE ioctl does no…Check if you run itEPSS 0.23%Mar 4, 2026
- Medium6.8A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod'sCheck if you run itEPSS 0.38%Mar 4, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix out-of-bounds access in sysfs attribute read/write Some f2fs sysfs attributes suffer from out-of-boundCheck if you run itEPSS 0.18%Mar 4, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an use-after-free issue in f2fs_write_end_io().Check if you run itEPSS 0.14%Mar 4, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid mapping wrong physical block for swapfile Xiaolong Guo reported a f2fs bug in bugzilla [1] [1Check if you run itEPSS 0.18%Mar 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()" This reverts commit 196c81fdd438f7ac429d563Check if you run itEPSS 0.12%Mar 4, 2026
Sort