Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3OpenCTI is an open-source cyber threat intelligence platform.Check if you run itEPSS 0.25%Apr 30, 2025
- High8.2Volcano is a Kubernetes-native batch scheduling system.Check if you run itEPSS 0.47%Apr 30, 2025
- Medium5.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Check if you run itEPSS 0.39%Apr 30, 2025
- Low2.1Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANCCheck if you run itEPSS 0.19%Apr 30, 2025
- Medium5.3A vulnerability was found in Netgear WG302v2 up to 5.2.9 and classified as critical.Check if you run itEPSS 1.98%Apr 30, 2025
- Medium5.5An app could impersonate system notifications.Check if you run itEPSS 0.28%Apr 30, 2025
- Medium4.3Missing Authorization vulnerability in David Gwyer Simple Sitemap – Create a Responsive HTML Sitemap simple-sitemap.This issue affects Simple Sitemap – Create a Responsive HTML SitCheck if you run itEPSS 0.39%Apr 30, 2025
- High8.5Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.78%Apr 30, 2025
- Critical9.8Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.09%Apr 30, 2025
- High7.5Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.58%Apr 30, 2025
- Critical9.9Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.97%Apr 30, 2025
- High8.7Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.88%Apr 30, 2025
- High8.1Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.39%Apr 30, 2025
- Medium6.5Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attackerCheck if you run itEPSS 0.29%Apr 30, 2025
- Medium4.3Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were onCheck if you run itEPSS 0.20%Apr 30, 2025
- Medium4.8Discourse is an open-source discussion platform.Check if you run itEPSS 0.26%Apr 30, 2025
- High8.6Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.75%Apr 30, 2025
- High8.8Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.Check if you run itEPSS 2.22%Apr 30, 2025
- High7.5Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.Check if you run itEPSS 0.65%Apr 30, 2025
- Critical9.1XWiki is a generic wiki platform.Check if you run itEPSS 0.40%Apr 30, 2025
- Critical9.1XWiki is a generic wiki platform.Check if you run itEPSS 0.35%Apr 30, 2025
- Low2.7XWiki is a generic wiki platform.Check if you run itEPSS 0.51%Apr 30, 2025
- Low3.8XWiki is a generic wiki platform.Check if you run itEPSS 0.40%Apr 30, 2025
- Medium6.1XWiki xwiki URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Apr 30, 2025
- Medium5.3A vulnerability was found in Netgear JWNR2000v2 1.0.0.11.Check if you run itEPSS 2.74%Apr 30, 2025
Sort