Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error.Check if you run itEPSS 0.17%Feb 26, 2026
- Medium5.9VMWare Workstation and Fusion contain a logic flaw in the management of network packets.Check if you run itEPSS 0.22%Feb 26, 2026
- High8.6Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the KibanaCheck if you run itEPSS 0.29%Feb 26, 2026
- High7.5Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)Check if you run itEPSS 0.32%Feb 26, 2026
- Medium6.3VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time passwCheck if you run itEPSS 0.33%Feb 26, 2026
- High7.2Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling.Check if you run itEPSS 0.17%Feb 26, 2026
- Low2.1Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path.Check if you run itEPSS 0.18%Feb 26, 2026
- Medium6.3Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB State string parsing.Check if you run itEPSS 0.31%Feb 26, 2026
- Medium6.3Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils.Check if you run itEPSS 0.34%Feb 26, 2026
- High7.5Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC-Check if you run itEPSS 0.37%Feb 26, 2026
- High7.5Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)Check if you run itEPSS 0.32%Feb 26, 2026
- Medium6.5Improper Validation of Specified Quantity in Input (CWE-1284) in Kibana can allow an authenticated attacker with view-only privileges to cause a Denial of Service via Input Data MaCheck if you run itEPSS 0.32%Feb 26, 2026
- High7.5Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153).Check if you run itEPSS 0.51%Feb 26, 2026
- Medium4.3A flaw was found in the FTP GVfs backend.Check if you run itEPSS 0.42%Feb 26, 2026
- Medium4.3A flaw was found in the FTP GVfs backend.Check if you run itEPSS 0.22%Feb 26, 2026
- High8.2Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00 allows attackers to execute a session hijacking attack via spoofing the IP add…Check if you run itEPSS 0.15%Feb 26, 2026
- Low2.3VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download.Check if you run itEPSS 0.32%Feb 26, 2026
- High7.5Discourse is an open source discussion platform.Check if you run itEPSS 1.27%Feb 26, 2026
- Medium5.4Discourse is an open source discussion platform.Check if you run itEPSS 0.17%Feb 26, 2026
- High7.5Discourse is an open source discussion platform.Check if you run itEPSS 0.26%Feb 26, 2026
- Medium6.5Discourse is an open source discussion platform.Check if you run itEPSS 0.93%Feb 26, 2026
- High8.4Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to arbitrary code execution when loading a malicious model.Check if you run itEPSS 0.18%Feb 26, 2026
- High8.4A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via abuse of a buiCheck if you run itEPSS 0.27%Feb 26, 2026
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology Ltd.Check if you run itEPSS 0.22%Feb 26, 2026
- Medium4.8Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes' endpoint, whiCheck if you run itEPSS 0.20%Feb 26, 2026
Sort