Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.44%Oct 29, 2025
- Medium6.0In Search Guard versions 3.1.1 and earlier, Field Masking (FM) rules are improperly enforced on fields of type IP (IP Address).Check if you run itEPSS 0.27%Oct 29, 2025
- High7.3Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows.Check if you run itEPSS 0.13%Oct 29, 2025
- Medium6.0In Search Guard FLX versions 3.1.1 and earlier, Field-Level Security (FLS) rules are improperly enforced on object-valued fields.Check if you run itEPSS 0.27%Oct 29, 2025
- Medium6.3CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Check if you run itEPSS 0.23%Oct 29, 2025
- Medium4.3A vulnerability has been identified in Rancher Manager, where sensitive information, including secret data, cluster import URLs, and registration tokens, is exposed to any entity wCheck if you run itEPSS 0.29%Oct 29, 2025
- Medium4.3A vulnerability has been identified within Rancher Manager, where after removing a custom GlobalRole that gives administrative access or the corresponding binding, the user still rCheck if you run itEPSS 0.22%Oct 29, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses Sanitize possible addl_desc_ptr out-of-bounds accesCheck if you run itEPSS 0.31%Oct 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card In try_to_register_card(), the return valueCheck if you run itEPSS 0.21%Oct 29, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: transport_ipc: validate payload size before reading handle handle_response() dereferences the payload asCheck if you run itEPSS 0.15%Oct 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue To prevent a potential crash in agg_dequeue (net/sched/sch_qfqCheck if you run itEPSS 0.21%Oct 29, 2025
- Medium5.4A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attackCheck if you run itEPSS 0.24%Oct 29, 2025
- Medium5.4A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-speCheck if you run itEPSS 0.21%Oct 29, 2025
- Medium4.3A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored iCheck if you run itEPSS 0.27%Oct 29, 2025
- Medium4.3Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.Check if you run itEPSS 0.26%Oct 29, 2025
- Medium4.3Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permCheck if you run itEPSS 0.17%Oct 29, 2025
- Medium4.3Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.Check if you run itEPSS 0.17%Oct 29, 2025
- Medium4.3Jenkins ByteGuard Build Actions Plugin 1.0 stores API tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended ReadCheck if you run itEPSS 0.17%Oct 29, 2025
- Medium4.3Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users witCheck if you run itEPSS 0.20%Oct 29, 2025
- Medium4.3A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attackeCheck if you run itEPSS 0.25%Oct 29, 2025
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specCheck if you run itEPSS 0.21%Oct 29, 2025
- High8.8Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrCheck if you run itEPSS 0.61%Oct 29, 2025
- Medium4.3A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.Check if you run itEPSS 0.25%Oct 29, 2025
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.Check if you run itEPSS 0.21%Oct 29, 2025
- Medium4.3A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.Check if you run itEPSS 0.29%Oct 29, 2025
Sort