Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,Check if you run itEPSS 0.16%Apr 3, 2026
- Medium6.5Shynet before 0.14.0 allows Host header injection in the password reset flow.Check if you run itEPSS 0.10%Apr 3, 2026
- Critical9.6The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property.Check if you run itEPSS 0.43%Apr 3, 2026
- High7.5An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php fileCheck if you run itEPSS 0.46%Apr 3, 2026
- High8.3An issue was discovered in Biztalk360 before 11.5.Check if you run itEPSS 0.67%Apr 3, 2026
- High8.8An issue was discovered in Biztalk360 before 11.5.Check if you run itEPSS 0.47%Apr 3, 2026
- Medium6.8An issue was discovered in Biztalk360 through 11.5.Check if you run itEPSS 0.90%Apr 3, 2026
- Critical9.1Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.86%Apr 2, 2026
- High8.6Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.92%Apr 2, 2026
- Critical10.0Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.73%Apr 2, 2026
- Critical9.6Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.61%Apr 2, 2026
- Critical10.0Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.72%Apr 2, 2026
- Critical10.0Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.93%Apr 2, 2026
- High8.7Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TCheck if you run itEPSS 0.46%Apr 2, 2026
- High8.7Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment.Check if you run itEPSS 0.44%Apr 2, 2026
- Critical9.2HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to rebCheck if you run itEPSS 0.52%Apr 2, 2026
- High7.5The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.Check if you run itEPSS 0.24%Apr 2, 2026
- Medium6.1XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API servicesCheck if you run itEPSS 0.21%Apr 2, 2026
- Critical9.3Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gCheck if you run itEPSS 0.46%Apr 2, 2026
- High8.5Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01 prior to 08.3.02 contain an arbitrary code execution vulnerability triggered when an administrator opens a maliciousCheck if you run itEPSS 0.14%Apr 2, 2026
- High8.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.38%Apr 2, 2026
- Medium5.4hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.15%Apr 2, 2026
- High8.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.29%Apr 2, 2026
- Medium6.1hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.40%Apr 2, 2026
- Critical10.0Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 1.04%Apr 2, 2026
Sort