Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7Missing AuthorizationPatch nowKEVEPSS 0.14%Jan 13, 2026
- Medium6.5Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameteCheck if you run itEPSS 0.43%Jan 13, 2026
- Medium6.5Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted bulk retrieval request.Check if you run itEPSS 0.49%Jan 13, 2026
- Medium6.5Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request.Check if you run itEPSS 0.33%Jan 13, 2026
- Medium6.5Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially craftCheck if you run itEPSS 0.43%Jan 13, 2026
- High8.7GuardDog is a CLI tool to identify malicious PyPI packages.Check if you run itEPSS 1.06%Jan 13, 2026
- High7.1GuardDog is a CLI tool to identify malicious PyPI packages.Check if you run itEPSS 0.51%Jan 13, 2026
- Medium5.1A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.27%Jan 13, 2026
- High8.9Eigent is a multi-agent Workforce.Check if you run itEPSS 0.64%Jan 13, 2026
- High7.1go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.Check if you run itEPSS 0.63%Jan 13, 2026
- High7.1go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol.Check if you run itEPSS 0.73%Jan 13, 2026
- High8.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.Check if you run itEPSS 0.71%Jan 13, 2026
- Medium5.5Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.17%Jan 13, 2026
- High7.8Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current uCheck if you run itEPSS 0.24%Jan 13, 2026
- High7.8Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current uCheck if you run itEPSS 0.23%Jan 13, 2026
- Medium5.5Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.17%Jan 13, 2026
- Medium5.5Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Check if you run itEPSS 0.25%Jan 13, 2026
- Medium5.5Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Check if you run itEPSS 0.19%Jan 13, 2026
- High7.8A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA) client.Check if you run itEPSS 0.17%Jan 13, 2026
- Medium5.3Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers.Check if you run itEPSS 0.36%Jan 13, 2026
- Medium5.3Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers.Check if you run itEPSS 0.39%Jan 13, 2026
- Medium6.5An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or AOS-8 operating systems.Check if you run itEPSS 0.37%Jan 13, 2026
- Medium6.5A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internCheck if you run itEPSS 1.43%Jan 13, 2026
- High7.2Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems.Check if you run itEPSS 0.51%Jan 13, 2026
- Medium5.5Substance3D - Designer versions 15.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Check if you run itEPSS 0.19%Jan 13, 2026
Sort