Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.40%Oct 14, 2026
- High7.5Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.31%Oct 14, 2026
- High7.5Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module).Check if you run itEPSS 0.21%Oct 14, 2026
- High7.5Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).Check if you run itEPSS 0.41%Oct 14, 2026
- High7.5Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).Check if you run itEPSS 0.40%Oct 14, 2026
- High8.1Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).Check if you run itEPSS 0.46%Oct 14, 2026
- High8.8Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.56%Oct 14, 2026
- High8.8Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.14%Oct 14, 2026
- High7.5A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.41%Oct 13, 2026
- Unknownninjaforms ninja_forms_file_uploads Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.60%Oct 13, 2026
- Medium5.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration end…Check if you run itEPSS 0.14%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default.Check if you run itEPSS 0.18%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in c…Check if you run itEPSS 0.25%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which…Check if you run itEPSS 0.10%Oct 12, 2026
- High7.7Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information.Check if you run itEPSS 0.30%Oct 12, 2026
- High8.0Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could res…Check if you run itEPSS 0.24%Oct 12, 2026
- High7.7Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privi…Check if you run itEPSS 0.39%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an…Check if you run itEPSS 0.32%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing.Check if you run itEPSS 0.25%Oct 12, 2026
- High7.5On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in…Check if you run itEPSS 0.40%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console.Check if you run itEPSS 0.15%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which…Check if you run itEPSS 0.32%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use…Check if you run itEPSS 0.29%Oct 12, 2026