Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currCheck if you run itEPSS 0.27%Jun 10, 2025
- High7.9Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potentialCheck if you run itEPSS 0.18%Jun 10, 2025
- Medium5.3Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security featurCheck if you run itEPSS 0.47%Jun 10, 2025
- High8.1Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalatCheck if you run itEPSS 0.57%Jun 10, 2025
- High8.2Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security featureCheck if you run itEPSS 0.53%Jun 10, 2025
- Medium6.5Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalatCheck if you run itEPSS 0.53%Jun 10, 2025
- High7.0Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection.Check if you run itEPSS 1.49%Jun 10, 2025
- High7.0Improper Neutralization of Special Elements in the backup name field may allow OS command injection.Check if you run itEPSS 3.35%Jun 10, 2025
- Medium6.3Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.44%Jun 10, 2025
- Medium6.0Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium4.9matrix-rust-sdk is an implementation of a Matrix client-server library in Rust.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium6.5OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-data request to OctoPrCheck if you run itEPSS 0.26%Jun 10, 2025
- Medium5.4OctoPrint provides a web interface for controlling consumer 3D printers.Check if you run itEPSS 0.26%Jun 10, 2025
- High8.3A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5)Check if you run itEPSS 0.69%Jun 10, 2025
- Critical9.5A vulnerability has been identified in Energy Services (All versions with G5DFR).Check if you run itEPSS 0.40%Jun 10, 2025
- Medium5.9A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.29%Jun 10, 2025
- Medium5.3A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.52%Jun 10, 2025
- High7.1A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.44%Jun 10, 2025
- Medium5.3A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5Check if you run itEPSS 0.38%Jun 10, 2025
- Critical9.9geotools geotools Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 42.29%Jun 10, 2025
- High7.7A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users.Check if you run itEPSS 0.49%Jun 10, 2025
- High7.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.51%Jun 10, 2025
- Medium5.3OSGeo GeoServer Missing AuthorizationPatch nowKEVEPSS 1.15%Jun 10, 2025
- High7.8A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk InstaCheck if you run itEPSS 0.21%Jun 10, 2025
- Medium5.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.37%Jun 10, 2025
Sort