Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.Check if you run itEPSS 0.23%Apr 21, 2025
- High8.0ManageWiki is a MediaWiki extension allowing users to manage wikis.Check if you run itEPSS 0.68%Apr 21, 2025
- Critical9.8Adept is a language for general purpose programming.Check if you run itEPSS 0.58%Apr 21, 2025
- Medium5.3A vulnerability was found in panhainan DS-Java 1.0 and classified as critical.Check if you run itEPSS 0.71%Apr 21, 2025
- Medium4.8A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9.Check if you run itEPSS 0.45%Apr 21, 2025
- High8.1A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication.Check if you run itEPSS 0.42%Apr 21, 2025
- High7.5CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCheck if you run itEPSS 0.39%Apr 21, 2025
- Medium4.0Cilium is a networking, observability, and security solution with an eBPF-based dataplane.Check if you run itEPSS 0.14%Apr 21, 2025
- High8.8Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.95%Apr 21, 2025
- Medium5.9User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potenCheck if you run itEPSS 0.34%Apr 21, 2025
- High8.7When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underlying stream while desCheck if you run itEPSS 0.62%Apr 21, 2025
- Medium5.6Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.Check if you run itEPSS 0.39%Apr 21, 2025
- High8.4An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files storCheck if you run itEPSS 0.36%Apr 21, 2025
- Low2.3Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.Check if you run itEPSS 0.44%Apr 21, 2025
- Medium5.5Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.ThCheck if you run itEPSS 0.30%Apr 21, 2025
- Low2.1An improper neutralization of input vulnerability was identified in the End of Life (EOL) OVA based connect installer component which is deployed for installation purposes in a cusCheck if you run itEPSS 0.25%Apr 21, 2025
- Medium6.1An Improper Authorization vulnerability was identified in the EOL OVA based connect component which is deployed for installation purposes in the customer internal network.Check if you run itEPSS 0.13%Apr 21, 2025
- Medium6.1An improper input validation vulnerability is identified in the End of Life (EOL) OVA based connect component which is deployed for installation purposes in the customer internal nCheck if you run itEPSS 0.33%Apr 21, 2025
- Low3.8A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area inCheck if you run itEPSS 0.25%Apr 21, 2025
- Critical9.2Local File Inclusion (LFI) vulnerability in a Render function of Formulatrix Rock Maker Web (RMW) allows a remote attacker to obtain sensitive data via arbitrary code execution.Check if you run itEPSS 0.93%Apr 21, 2025
- Medium6.8An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.57%Apr 21, 2025
- Medium6.8An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.56%Apr 21, 2025
- High8.6An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.55%Apr 21, 2025
- Medium4.3An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.43%Apr 21, 2025
- High8.1The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM.Check if you run itEPSS 0.14%Apr 21, 2025
Sort