Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.Check if you run itEPSS 0.22%Mar 4, 2026
- Low2.1A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter.Check if you run itEPSS 0.19%Mar 4, 2026
- Medium6.3The server certificate was not verified when an Arc agent connected to a Guardian or CMC.Check if you run itEPSS 0.12%Mar 4, 2026
- Low2.0A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties.Check if you run itEPSS 0.21%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability.Check if you run itEPSS 0.16%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.15%Mar 4, 2026
- High7.8Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privilege assignment vulnerability.Check if you run itEPSS 0.10%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.15%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability.Check if you run itEPSS 0.18%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.15%Mar 4, 2026
- Medium5.3A logic error in the remove_password() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL) allows a low-privileged user to cause data loss.Check if you run itEPSS 0.20%Mar 4, 2026
- High7.5Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability.Check if you run itEPSS 0.30%Mar 4, 2026
- High7.8kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()Check if you run itEPSS 1.04%Mar 4, 2026
- Medium6.7Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability.Check if you run itEPSS 0.12%Mar 4, 2026
- Medium6.6Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFileRepo modulesCheck if you run itEPSS 0.31%Mar 4, 2026
- Medium6.5The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the AJAX action with .Check if you run itEPSS 0.35%Mar 4, 2026
- Medium4.3The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the AJAX action with in all versions up to,Check if you run itEPSS 0.28%Mar 4, 2026
- Medium6.5The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to miCheck if you run itEPSS 0.26%Mar 4, 2026
- Medium6.4The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attribute of the shortcode in all versions up to, and includingCheck if you run itEPSS 0.30%Mar 4, 2026
- Critical10.0Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 44.43%Mar 4, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.66%Mar 4, 2026
- Medium6.1The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter in all versions up to, and including, 4.7.1 due to insufficCheck if you run itEPSS 0.27%Mar 4, 2026
- High7.5The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the 'js-support-ticket-token-tkstatus' cookie in version 2.8.2 dueCheck if you run itEPSS 1.43%Mar 4, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.Check if you run itEPSS 0.28%Mar 4, 2026
- Medium6.9SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails.Check if you run itEPSS 0.17%Mar 4, 2026
Sort