Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated uCheck if you run itEPSS 0.27%Mar 11, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 1.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated usCheck if you run itEPSS 0.23%Mar 11, 2026
- High8.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated uCheck if you run itEPSS 0.27%Mar 11, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service by sendinCheck if you run itEPSS 0.47%Mar 11, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated uCheck if you run itEPSS 0.28%Mar 11, 2026
- Medium5.1The administrator password can be changed without knowledge of the current password.Check if you run itEPSS 0.54%Mar 11, 2026
- Critical9.8An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta ThermaKube master.Check if you run itEPSS 0.52%Mar 11, 2026
- High7.5An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.32%Mar 11, 2026
- Critical9.8An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in benkeen generatedata 4.0.14.Check if you run itEPSS 0.60%Mar 11, 2026
- High8.8In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result in unintendedCheck if you run itEPSS 0.15%Mar 11, 2026
- High8.1An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profileCheck if you run itEPSS 0.25%Mar 11, 2026
- High8.6An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.Check if you run itEPSS 0.49%Mar 11, 2026
- Critical9.3An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.Check if you run itEPSS 0.51%Mar 11, 2026
- Critical9.3Lantronix EDS5000 Code Injection VulnerabilityPatch nowKEVEPSS 21.15%Mar 11, 2026
- High8.6An issue was discovered in Lantronix EDS5000 2.1.0.0R3.Check if you run itEPSS 0.46%Mar 11, 2026
- High8.6An issue was discovered in Lantronix EDS5000 2.1.0.0R3.Check if you run itEPSS 0.46%Mar 11, 2026
- High8.6An issue was discovered in Lantronix EDS5000 2.1.0.0R3.Check if you run itEPSS 0.48%Mar 11, 2026
- High8.6An issue was discovered in Lantronix EDS5000 2.1.0.0R3.Check if you run itEPSS 0.58%Mar 11, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticateCheck if you run itEPSS 0.55%Mar 11, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticatedCheck if you run itEPSS 0.60%Mar 11, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticatedCheck if you run itEPSS 0.45%Mar 11, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that under certain conditions could have alCheck if you run itEPSS 0.45%Mar 11, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could haveCheck if you run itEPSS 0.28%Mar 11, 2026
- Critical9.8netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSER_Check if you run itEPSS 0.57%Mar 11, 2026
- Medium6.4The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, anCheck if you run itEPSS 0.18%Mar 10, 2026
Sort