Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored witho…Check if you run itEPSS 0.31%Oct 12, 2026
- High7.4FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshake…Check if you run itEPSS 0.19%Oct 12, 2026
- High7.1FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing.Check if you run itEPSS 0.24%Oct 12, 2026
- Low2.3FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sendi…Check if you run itEPSS 0.22%Oct 12, 2026
- Low2.3FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidat…Check if you run itEPSS 0.22%Oct 12, 2026
- High8.6Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in d…Check if you run itEPSS 0.32%Oct 12, 2026
- High8.6A flaw has been found in Edimax BR-6208AC 1.32.Check if you run itEPSS 0.57%Oct 12, 2026
- Low1.9A vulnerability was identified in Netcore NR268 1.7.121109.Check if you run itEPSS 0.33%Oct 12, 2026
- Low2.1hex_core decompresses registry and Erlang term API responses without size limitsCheck if you run itEPSS 0.42%Oct 12, 2026
- High7.1Improper XML external entity restriction in Progress MarkLogic ServerCheck if you run itEPSS 0.27%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality.Check if you run itEPSS 0.24%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality.Check if you run itEPSS 0.27%Oct 12, 2026
- Medium6.1Cross-site scripting in Progress MarkLogic ServerCheck if you run itEPSS 0.20%Oct 12, 2026
- Medium6.5Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities.Check if you run itEPSS 0.27%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and…Check if you run itEPSS 0.21%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perfo…Check if you run itEPSS 0.31%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluatio…Check if you run itEPSS 0.45%Oct 12, 2026
- High8.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery funct…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate us…Check if you run itEPSS 0.30%Oct 12, 2026
- High8.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrat…Check if you run itEPSS 0.33%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path.Check if you run itEPSS 0.35%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations.Check if you run itEPSS 0.35%Oct 12, 2026
- Medium5.3QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of AdminOrdersController, AdminBookingDocumentController,…Check if you run itEPSS 0.21%Oct 12, 2026
- Low3.1A flaw was found in Quay.Check if you run itEPSS 0.15%Oct 12, 2026
- Medium6.4A flaw was found in Red Hat Quay.Check if you run itEPSS 0.17%Oct 12, 2026
Sort