Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Use-after-free in the JavaScript Engine: JIT component.Check if you run itEPSS 0.74%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Check if you run itEPSS 0.74%Feb 24, 2026
- Critical9.8JIT miscompilation, use-after-free in the JavaScript Engine: JIT component.Check if you run itEPSS 0.74%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Check if you run itEPSS 0.74%Feb 24, 2026
- Critical9.8Integer overflow in the JavaScript: Standard Library component.Check if you run itEPSS 0.63%Feb 24, 2026
- Critical10.0Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.Check if you run itEPSS 0.47%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: GC component.Check if you run itEPSS 0.57%Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the WebRTC: Audio/Video component.Check if you run itEPSS 0.59%Feb 24, 2026
- High7.6A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not aCheck if you run itEPSS 0.31%Feb 24, 2026
- High7.4A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.Check if you run itEPSS 0.37%Feb 24, 2026
- Medium5.3RTU500 web interface: An unprivileged user can read user management information.Check if you run itEPSS 0.29%Feb 24, 2026
- Medium5.3Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive SQL functions within SQL Lab and charts.Check if you run itEPSS 0.70%Feb 24, 2026
- Medium5.3Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error-Check if you run itEPSS 0.71%Feb 24, 2026
- High7.1An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls.Check if you run itEPSS 0.51%Feb 24, 2026
- Low2.3A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information.Check if you run itEPSS 0.47%Feb 24, 2026
- High7.1An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check when using a PoCheck if you run itEPSS 0.41%Feb 24, 2026
- Medium6.5Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see.Check if you run itEPSS 0.42%Feb 24, 2026
- Medium6.8An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local atCheck if you run itEPSS 0.21%Feb 24, 2026
- High8.4DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which they should norCheck if you run itEPSS 1.23%Feb 24, 2026
- Critical9.4A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and pack…Check if you run itEPSS 0.34%Feb 24, 2026
- High8.1When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider (IDP) there is a risk that a local user store user's information may b…Check if you run itEPSS 0.30%Feb 24, 2026
- Low2.9The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.Check if you run itEPSS 0.43%Feb 24, 2026
- Critical9.1An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.Check if you run itEPSS 0.70%Feb 24, 2026
- Critical9.1A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.56%Feb 24, 2026
- Critical9.1A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.56%Feb 24, 2026
Sort