Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Xbox Gaming Services Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.31%Sep 8, 2026
- High8.6Microsoft Authenticator Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.53%Sep 8, 2026
- High7.5Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionCheck if you run itEPSS 1.90%Sep 8, 2026
- High8.5A flaw was found in libxml2 with Python bindings enabled.Check if you run itEPSS 0.66%Sep 8, 2026
- Medium5.1A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.Check if you run itEPSS 0.14%Sep 8, 2026
- Medium5.4An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges.Check if you run itEPSS 0.36%Sep 8, 2026
- High7.5Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0Check if you run itEPSS 0.17%Sep 8, 2026
- High7.4An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.Check if you run itEPSS 0.41%Sep 8, 2026
- Medium5.1A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter.Check if you run itEPSS 0.26%Sep 8, 2026
- High7.2A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component.Check if you run itEPSS 0.73%Sep 8, 2026
- High7.8ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.30%Sep 8, 2026
- High8.1ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution VulnerabilityCheck if you run itEPSS 1.17%Sep 8, 2026
- High8.8ZDI-26-616: Koha Eval Code Injection Remote Code Execution VulnerabilityCheck if you run itEPSS 1.03%Sep 8, 2026
- High8.8Google Chromium V8 Out of Bounds Write VulnerabilityPatch nowKEVEPSS 3.51%Sep 8, 2026
- High7.8Microsoft Windows Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 0.39%Sep 8, 2026
- Critical9.9ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityPatch nowKEVEPSS 0.92%Sep 8, 2026
- High8.1ZTNA Portal Improper Certificate ValidationCheck if you run itEPSS 0.28%Sep 8, 2026
- Low2.7Null Pointer Dereference in Log ReportCheck if you run itEPSS 1.07%Sep 8, 2026
- UnknownUncontrolled Resource Consumption in SNMPCheck if you run itEPSS 0.41%Sep 8, 2026
- UnknownJWT used for authentication in web GUI signed with static keyCheck if you run itEPSS 0.52%Sep 8, 2026
- UnknownOpen Redirect on FortiSIEMCheck if you run itEPSS 0.22%Sep 8, 2026
- High7.2ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution VulnerabilityCheck if you run itEPSS 1.40%Sep 8, 2026
- UnknownBroken Access control on Websocket streamsCheck if you run itEPSS 0.23%Sep 8, 2026
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 0.39%Sep 8, 2026
- UnknownCVE-2026-75604 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.10%Sep 8, 2026
Sort