Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5OpenObserve is a cloud-native observability platform.Check if you run itEPSS 0.19%Nov 13, 2025
- Medium6.1Astro is a web framework.Check if you run itEPSS 0.26%Nov 13, 2025
- Medium6.6A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet throughCheck if you run itEPSS 0.59%Nov 13, 2025
- High7.3Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages.Check if you run itEPSS 0.16%Nov 13, 2025
- High8.1Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.Check if you run itEPSS 0.42%Nov 13, 2025
- Critical9.9Typebot is an open-source chatbot builder.Check if you run itEPSS 0.40%Nov 13, 2025
- High7.8Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability.Check if you run itEPSS 0.13%Nov 13, 2025
- Medium5.5Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability.Check if you run itEPSS 0.11%Nov 13, 2025
- Medium6.6Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain an Improper Access Control vulnerability.Check if you run itEPSS 0.11%Nov 13, 2025
- Medium6.6Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability.Check if you run itEPSS 0.12%Nov 13, 2025
- High7.8Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Action vulnerability.Check if you run itEPSS 0.14%Nov 13, 2025
- High8.8The issue was addressed by refusing external connections by default.Check if you run itEPSS 0.29%Nov 13, 2025
- Medium5.3A flaw has been found in AMTT Hotel Broadband Operation System 1.0.Check if you run itEPSS 0.37%Nov 13, 2025
- Medium6.9A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.47%Nov 13, 2025
- High7.5Typebot is an open-source chatbot builder.Check if you run itEPSS 0.25%Nov 13, 2025
- Medium6.9Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAPCheck if you run itEPSS 0.33%Nov 13, 2025
- Medium6.9Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAPCheck if you run itEPSS 0.32%Nov 13, 2025
- Medium6.1Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attackerCheck if you run itEPSS 0.15%Nov 13, 2025
- Low3.1Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the Add Channel Member API which allows users from one team to acCheck if you run itEPSS 0.20%Nov 13, 2025
- Medium6.8A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug ) insecurely defaults to binding the Java Debug Wire Protocol (JDWP) port to all networkCheck if you run itEPSS 0.43%Nov 13, 2025
- Medium6.9A security vulnerability has been detected in cameasy Liketea 1.0.0.Check if you run itEPSS 0.40%Nov 13, 2025
- Medium4.3A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges.Check if you run itEPSS 0.29%Nov 13, 2025
- Medium4.7A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious wCheck if you run itEPSS 0.26%Nov 13, 2025
- Medium6.1A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack againsCheck if you run itEPSS 0.24%Nov 13, 2025
- Medium6.3A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user.Check if you run itEPSS 0.39%Nov 13, 2025
Sort