Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing.Check if you run itEPSS 0.24%Oct 12, 2026
- High7.1Improper XML external entity restriction in Progress MarkLogic ServerCheck if you run itEPSS 0.27%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality.Check if you run itEPSS 0.24%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality.Check if you run itEPSS 0.27%Oct 12, 2026
- Medium6.1Cross-site scripting in Progress MarkLogic ServerCheck if you run itEPSS 0.20%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and…Check if you run itEPSS 0.21%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perfo…Check if you run itEPSS 0.31%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluatio…Check if you run itEPSS 0.45%Oct 12, 2026
- High8.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery funct…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate us…Check if you run itEPSS 0.30%Oct 12, 2026
- High8.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrat…Check if you run itEPSS 0.33%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path.Check if you run itEPSS 0.35%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations.Check if you run itEPSS 0.35%Oct 12, 2026
- High8.5Server-side request forgery in Progress MarkLogic Server Linux cloud deploymentsCheck if you run itEPSS 0.19%Oct 12, 2026
- High8.5Server-side request forgery in Progress MarkLogic Server Azure deploymentsCheck if you run itEPSS 0.19%Oct 12, 2026
- High7.8A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.4In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without e…Check if you run itEPSS 0.17%Oct 12, 2026
- Medium4.0In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior tog…Check if you run itEPSS 0.07%Oct 12, 2026
- Medium6.5In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting…Check if you run itEPSS 0.24%Oct 12, 2026
- Medium5.4In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value…Check if you run itEPSS 0.18%Oct 10, 2026
- Medium5.4In Progress® KendoReact (@progress/kendo-react-charts) starting with version 1.1.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as…Check if you run itEPSS 0.18%Oct 10, 2026
- High7.5When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed approval.Check if you run itEPSS 0.21%Oct 6, 2026
- Unknownurllib3 is an HTTP client library for Python.Check if you run itEPSS 0.29%Sep 29, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates one hwmon…Check if you run itEPSS 0.21%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block group at btree_writepages() start btree_writepages() writ…Check if you run itEPSS 0.21%Sep 17, 2026