Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissiCheck if you run itEPSS 0.15%Mar 3, 2026
- Medium5.2HP System Event Utility might allow denial of service with elevated arbitrary file writes.Check if you run itEPSS 0.11%Mar 3, 2026
- Critical9.3An improper restriction of operations within the bounds of a memory buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticat…Check if you run itEPSS 0.18%Mar 3, 2026
- Medium5.3In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if anCheck if you run itEPSS 0.30%Mar 3, 2026
- Medium5.3DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitizationCheck if you run itEPSS 0.39%Mar 3, 2026
- Medium5.1DOMPurify 3.1.3 through 3.2.6 and 2.5.3 through 2.5.8 contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting missing textCheck if you run itEPSS 0.29%Mar 3, 2026
- High8.6An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build eCheck if you run itEPSS 0.39%Mar 3, 2026
- Low2.3A vulnerability was determined in Tuya App and SDK 24.07.11 on Android.Check if you run itEPSS 0.34%Mar 3, 2026
- High8.4OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside theCheck if you run itEPSS 0.21%Mar 3, 2026
- High7.1An out-of-bounds read vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (5462afb0).Check if you run itEPSS 0.22%Mar 3, 2026
- Critical9.8A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63).Check if you run itEPSS 0.68%Mar 3, 2026
- High8.1A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63).Check if you run itEPSS 0.59%Mar 3, 2026
- Low3.7An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.Check if you run itEPSS 0.37%Mar 3, 2026
- High7.5An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.Check if you run itEPSS 0.84%Mar 3, 2026
- Medium6.9A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously…Check if you run itEPSS 0.32%Mar 3, 2026
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management…Check if you run itEPSS 0.24%Mar 3, 2026
- High8.5iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd.Check if you run itEPSS 0.19%Mar 3, 2026
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed maCheck if you run itEPSS 6.43%Mar 3, 2026
- Low2.1Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trCheck if you run itEPSS 0.15%Mar 3, 2026
- Medium4.8A weakness has been identified in xlnt-community xlnt up to 1.6.1.Check if you run itEPSS 0.22%Mar 3, 2026
- Medium5.3Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0.Check if you run itEPSS 0.51%Mar 3, 2026
- Critical9.8Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.Check if you run itEPSS 1.38%Mar 3, 2026
- Medium6.3A vulnerability was found in Dataease SQLBot up to 1.5.1.Check if you run itEPSS 0.21%Mar 3, 2026
- High7.2The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission data in allCheck if you run itEPSS 0.27%Mar 3, 2026
- Critical9.8OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.Check if you run itEPSS 0.46%Mar 3, 2026
Sort