Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration (host isolation, process terminatiCheck if you run itEPSS 0.23%Mar 19, 2026
- Medium5.5In wolfSSL 5.8.2 and earlier, a logic flaw existed in the TLS 1.2 server state machine implementation.Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.7Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153).Check if you run itEPSS 0.26%Mar 19, 2026
- Medium5.7Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.21%Mar 19, 2026
- Low2.1Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decryption path by injecting a TLS record shorter than the explicit ICheck if you run itEPSS 0.29%Mar 19, 2026
- Low2.2A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality.Check if you run itEPSS 0.11%Mar 19, 2026
- High7.5The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability.Check if you run itEPSS 0.29%Mar 19, 2026
- High8.2A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.Check if you run itEPSS 0.41%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information.Check if you run itEPSS 0.16%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in the 'My Information' screen.Check if you run itEPSS 0.16%Mar 19, 2026
- Medium5.3OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPuCheck if you run itEPSS 0.22%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile.Check if you run itEPSS 0.16%Mar 19, 2026
- Critical9.2OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'.Check if you run itEPSS 0.35%Mar 19, 2026
- High8.8Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent.Check if you run itEPSS 0.29%Mar 19, 2026
- High7.2Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6.Check if you run itEPSS 0.40%Mar 19, 2026
- Medium5.1Location Aware Sensor System by Linkit ONE, up to commit f06bd20 (2023-04-26), contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attacCheck if you run itEPSS 0.47%Mar 19, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Check if you run itEPSS 1.50%Mar 19, 2026
- High7.7An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.Check if you run itEPSS 0.56%Mar 19, 2026
- Critical10.0A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that couldCheck this weekEPSS 29.03%Mar 19, 2026
- High7.5Duplicate of CVE-2026-32286Check if you run itEPSS 9.00%Mar 19, 2026
- Critical9.1A flaw was found in libsoup.Check if you run itEPSS 0.47%Mar 19, 2026
- Medium6.5A flaw was found in libarchive.Check if you run itEPSS 0.36%Mar 19, 2026
- High7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingCheck if you run itEPSS 1.24%Mar 19, 2026
- High8.7BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authentCheck this weekEPSS 34.06%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticatedCheck this weekEPSS 12.49%Mar 19, 2026
Sort