Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query string of an HTTPCheck if you run itEPSS 0.24%Mar 13, 2026
- Critical9.1FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.34%Mar 13, 2026
- Critical9.3FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.75%Mar 13, 2026
- Critical9.4FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.32%Mar 13, 2026
- High7.5FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.36%Mar 13, 2026
- Critical9.8FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.36%Mar 13, 2026
- Low3.1FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.21%Mar 13, 2026
- High8.2FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.36%Mar 13, 2026
- High8.2FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.38%Mar 13, 2026
- High8.2Lexbor is a web browser engine library.Check if you run itEPSS 0.30%Mar 13, 2026
- High8.2Lexbor is a web browser engine library.Check if you run itEPSS 0.30%Mar 13, 2026
- Critical9.8telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer isCheck this weekEPSS 45.30%Mar 13, 2026
- High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.Check if you run itEPSS 1.04%Mar 13, 2026
- High7.1Uncontrolled Resource Consumption vulnerability in hexpm hexpm/hexpm allows Excessive Allocation.Check if you run itEPSS 0.52%Mar 13, 2026
- Critical10.0SandboxJS is a JavaScript sandboxing library.Check if you run itEPSS 0.62%Mar 13, 2026
- Medium6.3In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settingsCheck if you run itEPSS 0.11%Mar 13, 2026
- High8.7Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially craftedCheck if you run itEPSS 0.52%Mar 13, 2026
- Medium6.3Malicious configuration can lead to unauthorized file access in Apache Livy.Check if you run itEPSS 0.56%Mar 13, 2026
- Medium6.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy.Check if you run itEPSS 0.68%Mar 13, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab.Check if you run itEPSS 0.27%Mar 13, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab.Check if you run itEPSS 0.24%Mar 13, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent DASYLab.Check if you run itEPSS 0.27%Mar 13, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted DSB file in Digilent DASYLab.Check if you run itEPSS 0.24%Mar 13, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using theCheck if you run itEPSS 0.48%Mar 13, 2026
- High7.2Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.Check if you run itEPSS 0.32%Mar 13, 2026
Sort