Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sendi…Check if you run itEPSS 0.22%Oct 12, 2026
- Low2.3FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidat…Check if you run itEPSS 0.27%Oct 12, 2026
- High8.6Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in d…Check if you run itEPSS 0.32%Oct 12, 2026
- High8.6A flaw has been found in Edimax BR-6208AC 1.32.Check if you run itEPSS 0.57%Oct 12, 2026
- Low1.9A vulnerability was identified in Netcore NR268 1.7.121109.Check if you run itEPSS 0.20%Oct 12, 2026
- Low2.1hex_core decompresses registry and Erlang term API responses without size limitsCheck if you run itEPSS 0.45%Oct 12, 2026
- High7.1Improper XML external entity restriction in Progress MarkLogic ServerCheck if you run itEPSS 0.27%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality.Check if you run itEPSS 0.24%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality.Check if you run itEPSS 0.27%Oct 12, 2026
- Medium6.1Cross-site scripting in Progress MarkLogic ServerCheck if you run itEPSS 0.20%Oct 12, 2026
- Medium6.5Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities.Check if you run itEPSS 0.27%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and…Check if you run itEPSS 0.28%Oct 12, 2026
- LowImproper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine ruCheck if you run itEPSS 0.36%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perfo…Check if you run itEPSS 0.40%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluatio…Check if you run itEPSS 0.57%Oct 12, 2026
- High8.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery funct…Check if you run itEPSS 0.27%Oct 12, 2026
- High8.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate us…Check if you run itEPSS 0.38%Oct 12, 2026
- High8.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrat…Check if you run itEPSS 0.33%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path.Check if you run itEPSS 0.45%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations.Check if you run itEPSS 0.45%Oct 12, 2026
- Medium5.3QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of AdminOrdersController, AdminBookingDocumentController,…Check if you run itEPSS 0.21%Oct 12, 2026
- Low3.1A flaw was found in Quay.Check if you run itEPSS 0.15%Oct 12, 2026
- Medium6.4A flaw was found in Red Hat Quay.Check if you run itEPSS 0.17%Oct 12, 2026
- High7.3A vulnerability has been found in Netcore NR268 1.7.121109.Check if you run itEPSS 0.43%Oct 12, 2026
- Medium5.5A vulnerability has been found in Exponent CMS up to 3.0.2patch2.Check if you run itEPSS 0.25%Oct 12, 2026
Sort