Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0.Check if you run itEPSS 0.26%Oct 12, 2026
- Medium5.3copyparty FTP: upload outside defined volumes (limited path traversal)Check if you run itEPSS 0.31%Oct 12, 2026
- Medium6.5obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.Check if you run itEPSS 0.24%Oct 12, 2026
- Medium5.2An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized leng…Check if you run itEPSS 0.17%Oct 12, 2026
- Medium5.9Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memorCheck if you run itEPSS 0.22%Oct 12, 2026
- Critical9.3A vulnerability was identified in Edimax BR-6208AC 1.32.Check if you run itEPSS 2.03%Oct 12, 2026
- Medium5.5A vulnerability was found in Edimax BR-6208AC 1.32.Check if you run itEPSS 1.66%Oct 12, 2026
- Critical9.6obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopbackCheck if you run itEPSS 0.15%Oct 12, 2026
- Medium5.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration end…Check if you run itEPSS 0.14%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default.Check if you run itEPSS 0.23%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in c…Check if you run itEPSS 0.32%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which…Check if you run itEPSS 0.10%Oct 12, 2026
- High7.7Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information.Check if you run itEPSS 0.30%Oct 12, 2026
- High8.0Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could res…Check if you run itEPSS 0.24%Oct 12, 2026
- High7.7Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privi…Check if you run itEPSS 0.49%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an…Check if you run itEPSS 0.43%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing.Check if you run itEPSS 0.31%Oct 12, 2026
- High7.5On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in…Check if you run itEPSS 0.50%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console.Check if you run itEPSS 0.19%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which…Check if you run itEPSS 0.40%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use…Check if you run itEPSS 0.36%Oct 12, 2026
- High7.7A flaw was found in the OpenShift console.Check if you run itEPSS 0.38%Oct 12, 2026
- High8.5Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations.Check if you run itEPSS 0.29%Oct 12, 2026
Sort