Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.92%Apr 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Check if you run itEPSS 0.77%Apr 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).Check if you run itEPSS 0.77%Apr 15, 2025
- Medium6.7Vulnerability in Oracle Secure Backup (component: General).Check if you run itEPSS 0.20%Apr 15, 2025
- Medium6.5Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.82%Apr 15, 2025
- Medium5.4Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Personalization Server).Check if you run itEPSS 0.19%Apr 15, 2025
- Medium6.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).Check if you run itEPSS 0.97%Apr 15, 2025
- Medium6.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).Check if you run itEPSS 1.12%Apr 15, 2025
- Medium6.0Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot).Check if you run itEPSS 0.43%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain a list of smart devices by knowing a valid username.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium6.9An unauthenticated attacker can obtain a user's plant list by knowing the username.Check if you run itEPSS 0.31%Apr 15, 2025
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.55%Apr 15, 2025
- Medium6.9An authenticated attacker can obtain any plant name by knowing the plant ID.Check if you run itEPSS 0.30%Apr 15, 2025
- Medium6.9An unauthenticated attacker can check the existence of usernames in the system by querying an API.Check if you run itEPSS 0.31%Apr 15, 2025
- High8.7An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while adding or editing a plant.Check if you run itEPSS 0.40%Apr 15, 2025
- Medium4.6Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.76%Apr 15, 2025
- High7.5TEIGarage is a webservice and RESTful service to transform, convert and validate various formats, focussing on the TEI format.Check if you run itEPSS 0.42%Apr 15, 2025
- Critical9.3An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring.Check if you run itEPSS 0.51%Apr 15, 2025
- High8.8make-initrd-ng is a tool for copying binaries and their dependencies.Check if you run itEPSS 0.19%Apr 15, 2025
- Medium6.7Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating systeCheck if you run itEPSS 0.23%Apr 15, 2025
- Medium6.7Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating sCheck if you run itEPSS 0.19%Apr 15, 2025
- Medium6.5pleezer is a headless Deezer Connect player.Check if you run itEPSS 0.39%Apr 15, 2025
- Critical10.0Argo Events is an event-driven workflow automation framework for Kubernetes.Check if you run itEPSS 0.79%Apr 15, 2025
- Critical9.8Dpanel is a Docker visualization panel system which provides complete Docker management functions.Check if you run itEPSS 0.90%Apr 15, 2025
- High8.3Collabora Online is a collaborative online office suite based on LibreOffice technology.Check if you run itEPSS 0.48%Apr 15, 2025
Sort