Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.6Exposure of sensitive information during transient execution for some TDX within Ring 0: Hypervisor may allow an information disclosure.Check if you run itEPSS 0.13%Feb 10, 2026
- Medium6.7Loop with unreachable exit condition ('infinite loop') for some Intel(R) Platform within Ring 0: Kernel may allow a denial of service.Check if you run itEPSS 0.13%Feb 10, 2026
- Medium5.6Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C.Check if you run itEPSS 0.12%Feb 10, 2026
- Medium6.7Out-of-bounds write in the firmware for some Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service.Check if you run itEPSS 0.13%Feb 10, 2026
- High7.1Improper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege.Check if you run itEPSS 0.14%Feb 10, 2026
- Low2.0Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet 800-Series before version 2.2.2.0 (esxi 8.0) & 2.2.3.0 (esxi 9.0) within Ring 1: Device Drivers mCheck if you run itEPSS 0.13%Feb 10, 2026
- Medium6.0Uncaught exception in the firmware for some 100GbE Intel(R) Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service.Check if you run itEPSS 0.13%Feb 10, 2026
- Medium5.6Improper buffer restrictions in the firmware for the TDX Module may allow an escalation of privilege.Check if you run itEPSS 0.15%Feb 10, 2026
- Medium5.4Incorrect default permissions for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538 within Ring 3Check if you run itEPSS 0.13%Feb 10, 2026
- High7.1Improper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege.Check if you run itEPSS 0.14%Feb 10, 2026
- Medium5.4Uncontrolled search path in some software installer for some VTune(TM) Profiler software and Intel(R) oneAPI Base Toolkits before version 2025.0.Check if you run itEPSS 0.14%Feb 10, 2026
- High8.2Null pointer dereference in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability within Ring 0: Kernel may allow a denial of service.Check if you run itEPSS 0.27%Feb 10, 2026
- Medium5.4Improper conditions check for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538 within Ring 3: User Applications may allCheck if you run itEPSS 0.12%Feb 10, 2026
- High7.5An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authCheck if you run itEPSS 0.75%Feb 10, 2026
- Medium6.7A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versiCheck if you run itEPSS 1.49%Feb 10, 2026
- Medium6.4An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0Check if you run itEPSS 0.24%Feb 10, 2026
- Low3.8An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.Check if you run itEPSS 0.16%Feb 10, 2026
- Medium5.2An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7Check if you run itEPSS 0.41%Feb 10, 2026
- Medium6.8A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticatCheck if you run itEPSS 0.37%Feb 10, 2026
- High7.9An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandCheck if you run itEPSS 7.47%Feb 10, 2026
- Critical9.8CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability.Check if you run itEPSS 0.70%Feb 10, 2026
- Medium4.8A vulnerability has been found in wasm3 up to 0.5.0.Check if you run itEPSS 0.19%Feb 10, 2026
- High7.5The Simplicity Device Manager Tool has a Reflected XSS (Cross-site-scripting) vulnerability in several API endpoints.Check if you run itEPSS 0.31%Feb 10, 2026
- Medium6.5SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database.Check if you run itEPSS 0.83%Feb 10, 2026
- Medium4.8A security vulnerability has been detected in ckolivas lrzip up to 0.651.Check if you run itEPSS 0.19%Feb 10, 2026
Sort