Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1OpenPLC_V3 has a vulnerability in the enipThread function that occurs due to the lack of a return value.Check if you run itEPSS 0.21%Oct 1, 2025
- High7.8NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in theCheck if you run itEPSS 0.15%Oct 1, 2025
- Medium6.7NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack.Check if you run itEPSS 0.16%Oct 1, 2025
- High7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 9.36%Oct 1, 2025
- High7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.60%Oct 1, 2025
- High7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.59%Oct 1, 2025
- Medium5.5Discourse is an open-source community discussion platform.Check if you run itEPSS 0.30%Oct 1, 2025
- High7.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.53%Oct 1, 2025
- Medium6.2Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.20%Oct 1, 2025
- Low3.3auth0-PHP is an SDK for Auth0 Authentication and Management APIs.Check if you run itEPSS 0.35%Oct 1, 2025
- High7.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.43%Oct 1, 2025
- High7.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.37%Oct 1, 2025
- Medium4.3Discourse is an open-source community discussion platform.Check if you run itEPSS 0.26%Oct 1, 2025
- Medium5.8A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0.Check if you run itEPSS 0.12%Oct 1, 2025
- Low3.5Discourse is an open-source community discussion platform.Check if you run itEPSS 0.21%Oct 1, 2025
- High7.6In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure.Check if you run itEPSS 0.34%Oct 1, 2025
- Medium5.9IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.Check if you run itEPSS 0.27%Oct 1, 2025
- Medium5.1IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls.Check if you run itEPSS 0.11%Oct 1, 2025
- Medium6.3IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.Check if you run itEPSS 0.22%Oct 1, 2025
- Medium5.1In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/stringsCheck if you run itEPSS 0.34%Oct 1, 2025
- Medium6.3Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target ( ) didn't correctly handle path separators, causing the standard library's Path API to ignore path compoCheck if you run itEPSS 0.52%Oct 1, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks againCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium4.8A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (UnifCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks againCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium5.7In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does nCheck if you run itEPSS 0.37%Oct 1, 2025
Sort