Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2A vulnerability has been identified within Rancher Manager in which it did not enforce request body size limits on certain public (unauthenticated) and authenticated API endpoints.Check if you run itEPSS 0.52%Sep 2, 2025
- High8.6Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass.Check if you run itEPSS 0.35%Sep 2, 2025
- High7.7Unauthorized disclosure of sensitive data: Any user with or permissions on resources could retrieve Helm values containing credentials or other secrets.Check if you run itEPSS 0.24%Sep 2, 2025
- Medium4.7Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure.Check if you run itEPSS 0.24%Sep 2, 2025
- Medium4.7Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing.Check if you run itEPSS 0.15%Sep 2, 2025
- Medium4.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.19%Sep 2, 2025
- Critical9.3E2 Facility Management Systems use a proprietary protocol that allows for unauthenticated file operations on any file in the file system.Check if you run itEPSS 0.35%Sep 2, 2025
- High8.6E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned.Check if you run itEPSS 0.22%Sep 2, 2025
- Critical9.2E3 Site Supervisor Control (firmware version < 2.31F01) generates the root linux password on each boot.Check if you run itEPSS 0.48%Sep 2, 2025
- Medium6.9E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by defCheck if you run itEPSS 0.36%Sep 2, 2025
- High8.7E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation.Check if you run itEPSS 0.34%Sep 2, 2025
- Medium5.1E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files.Check if you run itEPSS 0.20%Sep 2, 2025
- High7.7E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application serCheck if you run itEPSS 0.26%Sep 2, 2025
- High8.8E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files.Check if you run itEPSS 0.36%Sep 2, 2025
- Medium5.3E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication.Check if you run itEPSS 0.31%Sep 2, 2025
- Critical9.3E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password.Check if you run itEPSS 0.54%Sep 2, 2025
- Critical9.8A deserialization vulnerability exists in the H2O-3 REST API (POST /99/ImportSQLTable) that affects all versions up to 3.46.0.7.Check if you run itEPSS 0.69%Sep 2, 2025
- High8.6The ns_backup extension through 13.0.2 for TYPO3 allows command injection.Check if you run itEPSS 1.09%Sep 2, 2025
- Medium6.9Lack of authorisation in Deporsite by T-INNOVA.Check if you run itEPSS 0.33%Sep 2, 2025
- Medium6.9Lack of authorisation in Deporsite by T-INNOVA.Check if you run itEPSS 0.33%Sep 2, 2025
- High8.5A weakness has been identified in alaneuler batteryKid up to 2.1 on macOS.Check if you run itEPSS 0.27%Sep 2, 2025
- Medium6.9A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1.Check if you run itEPSS 0.42%Sep 2, 2025
- Low2.3OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14…Check if you run itEPSS 0.28%Sep 2, 2025
- Medium6.9A vulnerability was found in Campcodes Farm Management System 1.0.Check if you run itEPSS 0.42%Sep 2, 2025
- High7.8SonarQube Server and Cloud is a static analysis solution for continuous code quality and security inspection.Check if you run itEPSS 1.09%Sep 2, 2025
Sort