Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.Check if you run itEPSS 0.31%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.45%Mar 17, 2026
- High8.7Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.Check if you run itEPSS 0.31%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.36%Mar 17, 2026
- High7.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.54%Mar 17, 2026
- Critical9.1Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 1.10%Mar 17, 2026
- High8.6This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.Check if you run itEPSS 0.66%Mar 17, 2026
- Critical9.1Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 9.96%Mar 17, 2026
- Critical9.1### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver.Check if you run itEPSS 0.29%Mar 17, 2026
- High8.5The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.Check if you run itEPSS 0.66%Mar 17, 2026
- Critical9.3The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries.Check if you run itEPSS 0.58%Mar 17, 2026
- High8.8Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved confCheck if you run itEPSS 0.56%Mar 17, 2026
- Critical9.3JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.54%Mar 17, 2026
- High7.0JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files.Check if you run itEPSS 0.14%Mar 17, 2026
- Medium6.3The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates.Check if you run itEPSS 0.35%Mar 17, 2026
- Critical9.3The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.58%Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console.Check if you run itEPSS 0.37%Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files.Check if you run itEPSS 0.18%Mar 17, 2026
- Medium6.9A vulnerability was identified in code-projects Simple Food Order System 1.0.Check if you run itEPSS 0.38%Mar 17, 2026
- High8.7A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pCheck if you run itEPSS 0.38%Mar 17, 2026
- High7.1An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.Check if you run itEPSS 0.25%Mar 17, 2026
- Medium4.3Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.27%Mar 17, 2026
- High8.8Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.36%Mar 17, 2026
- High8.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.27%Mar 17, 2026
- High8.6Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH.Check if you run itEPSS 1.75%Mar 17, 2026
Sort