Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currCheck if you run itEPSS 0.27%Jun 10, 2025
- Medium5.5InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.28%Jun 10, 2025
- Medium5.5InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.28%Jun 10, 2025
- High7.8InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currCheck if you run itEPSS 0.27%Jun 10, 2025
- Medium5.5InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.30%Jun 10, 2025
- High7.8InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currCheck if you run itEPSS 0.27%Jun 10, 2025
- High7.9Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potentialCheck if you run itEPSS 0.18%Jun 10, 2025
- Medium5.3Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security featurCheck if you run itEPSS 0.47%Jun 10, 2025
- High8.1Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalatCheck if you run itEPSS 0.57%Jun 10, 2025
- High8.2Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security featureCheck if you run itEPSS 0.53%Jun 10, 2025
- Medium6.5Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalatCheck if you run itEPSS 0.53%Jun 10, 2025
- High7.0Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection.Check if you run itEPSS 1.49%Jun 10, 2025
- High7.0Improper Neutralization of Special Elements in the backup name field may allow OS command injection.Check if you run itEPSS 3.35%Jun 10, 2025
- Medium6.3Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.44%Jun 10, 2025
- Medium6.0Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium4.9matrix-rust-sdk is an implementation of a Matrix client-server library in Rust.Check if you run itEPSS 0.37%Jun 10, 2025
- Medium6.5OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-data request to OctoPrCheck if you run itEPSS 0.26%Jun 10, 2025
- Medium5.4OctoPrint provides a web interface for controlling consumer 3D printers.Check if you run itEPSS 0.26%Jun 10, 2025
- High8.3A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5)Check if you run itEPSS 0.69%Jun 10, 2025
- Critical9.5A vulnerability has been identified in Energy Services (All versions with G5DFR).Check if you run itEPSS 0.40%Jun 10, 2025
- Medium5.9A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.29%Jun 10, 2025
- Medium5.3A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.52%Jun 10, 2025
- High7.1A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK532Check if you run itEPSS 0.44%Jun 10, 2025
- Medium5.3A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5Check if you run itEPSS 0.38%Jun 10, 2025
- Critical9.9geotools geotools Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 42.29%Jun 10, 2025
Sort