Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apache OpenOffice documents can contain links to other files.Open the advisoryNov 12, 2025
- High8.1Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources".Open the advisoryNov 12, 2025
- Medium6.5Apache OpenOffice documents can contain links.Open the advisoryNov 12, 2025
- High7.5Apache OpenOffice documents can contain links.Open the advisoryNov 12, 2025
- UnknownApache Solr Improper AuthenticationPatch nowKEVEPSS 92.75%Oct 31, 2025
- UnknownApache Struts Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 70.21%Oct 13, 2025
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.Check if you run itEPSS 2.33%Sep 2, 2025
- UnknownApache Superset Improper Input ValidationPatch nowKEVEPSS 86.03%Aug 12, 2025
- UnknownApache Superset Deserialization of Untrusted DataPatch nowKEVEPSS 35.45%Aug 12, 2025
- Critical9.3SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter.Check this weekEPSS 48.00%Jul 8, 2025
- UnknownApache camel Improper Neutralization of Internal Special ElementsPatch nowKEVEPSS 76.09%Jul 3, 2025
- Unknowndebian debian_linux Deserialization of Untrusted DataPatch nowKEVEPSS 3.47%Jun 23, 2025
- High8.1CodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.03%Jun 17, 2025
- Medium4.7In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs.Check if you run itEPSS 0.67%Jun 10, 2025
- Low2.3The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0.Check if you run itEPSS 0.82%Jun 10, 2025
- High8.1When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the API key and the secret key of the 'kubeadmin' user of the caller account are used toCheck this weekEPSS 66.00%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and sCheck if you run itEPSS 0.59%Jun 10, 2025
- High8.8A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password ofCheck if you run itEPSS 0.59%Jun 10, 2025
- High7.5Apache kafka Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.78%Jun 10, 2025
- High7.5In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API.Check if you run itEPSS 1.03%Jun 10, 2025
- High8.8A possible security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 1.07%Jun 10, 2025
- UnknownApache OFBiz Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 10.18%Jun 7, 2025
- High8.9Kafbat UI is a web user interface for managing Apache Kafka clusters.Check if you run itEPSS 0.57%Jun 6, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Apache InLong.Check if you run itEPSS 0.66%Jun 6, 2025
- Medium6.5If you enable Basic Authentication in Pekko Management using the Java DSL, the authenticator may not be properly applied.Check if you run itEPSS 0.75%Jun 3, 2025