Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.Check if you run itEPSS 0.30%Apr 3, 2026
- Critical9.2A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.Check if you run itEPSS 0.44%Apr 3, 2026
- High8.7Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allCheck if you run itEPSS 0.94%Apr 3, 2026
- Medium6.9A specific administrative endpoint notifications is accessible without proper authentication.Check if you run itEPSS 0.39%Apr 3, 2026
- High8.7A specific administrative endpoint is accessible without proper authentication, exposing device management functions.Check if you run itEPSS 0.49%Apr 3, 2026
- High7.0Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability in the execution of user-configured external applications that allows a local aCheck if you run itEPSS 0.12%Apr 3, 2026
- High7.3Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redCheck if you run itEPSS 0.28%Apr 3, 2026
- High7.1Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data thCheck if you run itEPSS 0.28%Apr 3, 2026
- High7.3OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by usinCheck if you run itEPSS 0.92%Apr 3, 2026
- Medium5.3Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.32%Apr 3, 2026
- Medium6.9Development and test API endpoints are present that mirror production functionality.Check if you run itEPSS 0.33%Apr 3, 2026
- High8.7Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering cCheck if you run itEPSS 0.39%Apr 3, 2026
- Critical9.1Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept orCheck if you run itEPSS 0.51%Apr 3, 2026
- Critical9.1Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to interceptCheck if you run itEPSS 0.28%Apr 3, 2026
- Critical9.8Cloudreve is a self-hosted file management and sharing system.Check if you run itEPSS 0.39%Apr 3, 2026
- Critical10.0ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.39%Apr 3, 2026
- Medium6.9A weakness has been identified in BookStackApp BookStack up to 26.03.Check if you run itEPSS 0.33%Apr 3, 2026
- Medium5.3A flaw was found in util-linux.Check if you run itEPSS 0.44%Apr 3, 2026
- Medium5.5A flaw was found in rust-rpm-sequoia.Check if you run itEPSS 0.09%Apr 3, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityPatch nowKEVEPSS 93.98%Apr 3, 2026
- Low2.1A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit.Check if you run itEPSS 0.22%Apr 3, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.72%Apr 3, 2026
- Medium5.1A vulnerability was determined in NASA cFS up to 7.0.0.Check if you run itEPSS 0.23%Apr 3, 2026
- Critical9.8In mlflow/mlflow, the FastAPI job endpoints under are not protected by authentication or authorization when the app is enabled.Check if you run itEPSS 4.39%Apr 3, 2026
- Medium5.3A vulnerability was found in NASA cFS up to 7.0.0.Check if you run itEPSS 0.39%Apr 3, 2026
Sort