Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate.Check if you run itEPSS 0.38%May 22, 2025
- Medium6.9A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical.Check if you run itEPSS 0.75%May 22, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.47%May 22, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.46%May 22, 2025
- Medium4.9An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.44%May 22, 2025
- High7.2Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allCheck if you run itEPSS 0.62%May 22, 2025
- High7.2Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation.Check if you run itEPSS 0.50%May 22, 2025
- Medium4.1Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNXCheck this weekEPSS 10.16%May 22, 2025
- Medium4.3Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input DCheck if you run itEPSS 0.31%May 22, 2025
- Medium5.4Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data MaCheck if you run itEPSS 0.50%May 22, 2025
- Medium5.3Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input DataCheck if you run itEPSS 0.37%May 22, 2025
- Medium5.3Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.Check if you run itEPSS 0.33%May 22, 2025
- Medium6.8Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.Check if you run itEPSS 0.33%May 22, 2025
- Medium6.9A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical.Check if you run itEPSS 0.75%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.24%May 22, 2025
- High7.7Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, LinuxCheck if you run itEPSS 0.34%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.24%May 22, 2025
- High7.3Uncontrolled Search Path Element vulnerability in Forcepoint FIE Endpoint allows Privilege Escalation, Code Injection, Hijacking a privileged process.This issue affects FIE EndpoinCheck if you run itEPSS 0.17%May 22, 2025
- Medium6.5Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting IncorrCheck if you run itEPSS 0.37%May 22, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.74%May 22, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.Check if you run itEPSS 0.74%May 22, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.Check if you run itEPSS 1.82%May 22, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.Check if you run itEPSS 6.14%May 22, 2025
- Medium6.5Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help caCheck if you run itEPSS 1.65%May 22, 2025
- High8.8Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploited leading to arbitraCheck if you run itEPSS 0.29%May 22, 2025
Sort