Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.59%Oct 1, 2025
- Medium5.5Discourse is an open-source community discussion platform.Check if you run itEPSS 0.30%Oct 1, 2025
- High7.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.53%Oct 1, 2025
- Medium6.2Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.20%Oct 1, 2025
- Low3.3auth0-PHP is an SDK for Auth0 Authentication and Management APIs.Check if you run itEPSS 0.35%Oct 1, 2025
- High7.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.43%Oct 1, 2025
- High7.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.37%Oct 1, 2025
- Medium4.3Discourse is an open-source community discussion platform.Check if you run itEPSS 0.26%Oct 1, 2025
- Medium5.8A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0.Check if you run itEPSS 0.12%Oct 1, 2025
- Low3.5Discourse is an open-source community discussion platform.Check if you run itEPSS 0.21%Oct 1, 2025
- High7.6In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure.Check if you run itEPSS 0.34%Oct 1, 2025
- Medium5.9IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.Check if you run itEPSS 0.27%Oct 1, 2025
- Medium5.1IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls.Check if you run itEPSS 0.11%Oct 1, 2025
- Medium6.3IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.Check if you run itEPSS 0.22%Oct 1, 2025
- Medium5.1In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/stringsCheck if you run itEPSS 0.34%Oct 1, 2025
- Medium6.3Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target ( ) didn't correctly handle path separators, causing the standard library's Path API to ignore path compoCheck if you run itEPSS 0.52%Oct 1, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks againCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium4.8A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (UnifCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks againCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium5.7In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does nCheck if you run itEPSS 0.37%Oct 1, 2025
- High7.5In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attackeCheck if you run itEPSS 0.47%Oct 1, 2025
- Medium5.7In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, a low-privileged user that does noCheck if you run itEPSS 0.37%Oct 1, 2025
- Medium4.9In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role tCheck if you run itEPSS 0.56%Oct 1, 2025
- Medium6.5In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that doesCheck if you run itEPSS 0.45%Oct 1, 2025
- Medium4.6In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does noCheck if you run itEPSS 0.31%Oct 1, 2025
Sort