Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection.Check if you run itEPSS 1.49%Jun 10, 2025
- High7.0Improper Neutralization of Special Elements in the backup name field may allow OS command injection.Check if you run itEPSS 3.35%Jun 10, 2025
- Medium6.3Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.44%Jun 10, 2025
- Medium6.0Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium4.9matrix-rust-sdk is an implementation of a Matrix client-server library in Rust.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium6.5OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-data request to OctoPrCheck if you run itEPSS 0.26%Jun 10, 2025
- Medium5.4OctoPrint provides a web interface for controlling consumer 3D printers.Check if you run itEPSS 0.26%Jun 10, 2025
- High8.3A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5)Check if you run itEPSS 0.69%Jun 10, 2025
- Critical9.5A vulnerability has been identified in Energy Services (All versions with G5DFR).Check if you run itEPSS 0.40%Jun 10, 2025
- Medium5.9A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.29%Jun 10, 2025
- Medium5.3A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.52%Jun 10, 2025
- High7.1A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.44%Jun 10, 2025
- Medium5.3A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5Check if you run itEPSS 0.38%Jun 10, 2025
- Critical9.9geotools geotools Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 42.29%Jun 10, 2025
- High7.7A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users.Check if you run itEPSS 0.49%Jun 10, 2025
- High7.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.51%Jun 10, 2025
- Medium5.3OSGeo GeoServer Missing AuthorizationPatch nowKEVEPSS 1.15%Jun 10, 2025
- High7.8A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk InstaCheck if you run itEPSS 0.21%Jun 10, 2025
- Medium5.5GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium5.3GeoServer is an open source server that allows users to share and edit geospatial data.Check if you run itEPSS 0.44%Jun 10, 2025
- High7.1SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL.Check if you run itEPSS 0.21%Jun 10, 2025
- Medium4.8SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability.Check if you run itEPSS 0.19%Jun 10, 2025
- High8.8A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.Check if you run itEPSS 0.38%Jun 10, 2025
- High7.3A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password.Check if you run itEPSS 0.36%Jun 10, 2025
- High8.8A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.Check if you run itEPSS 0.38%Jun 10, 2025
Sort