Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the a…Check if you run itEPSS 1.66%Sep 3, 2026
- High8.7MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source.Check if you run itEPSS 0.35%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables.Check if you run itEPSS 0.81%Sep 3, 2026
- Critical9.2MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publis…Check if you run itEPSS 0.55%Sep 3, 2026
- Critical9.3MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes unsanitized text to a shell command.Check if you run itEPSS 1.78%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges.Check if you run itEPSS 0.81%Sep 3, 2026
- Critical10.0Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.80%Sep 3, 2026
- Critical10.0Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Sep 3, 2026
- High7.4Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.92%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of ServiceCheck if you run itEPSS 0.63%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet AllocationCheck if you run itEPSS 0.76%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>.Check if you run itEPSS 0.66%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet LengthCheck if you run itEPSS 1.03%Sep 3, 2026
- High8.5MOOS-IvP through 24.8.1 alogsplit Command Injection via Input PathnameCheck if you run itEPSS 0.47%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload CountsCheck if you run itEPSS 1.09%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation.Check if you run itEPSS 1.44%Sep 3, 2026
- High8.7MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP LengthCheck if you run itEPSS 2.08%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route EnrollmentCheck if you run itEPSS 0.41%Sep 3, 2026
- Critical9.3MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes.Check if you run itEPSS 0.41%Sep 3, 2026
- High8.8MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire IdentityCheck if you run itEPSS 0.51%Sep 3, 2026
- High8.7MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen.Check if you run itEPSS 3.37%Sep 3, 2026
- Medium5.0Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Check if you run itEPSS 0.84%Sep 3, 2026
- Medium5.0Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.84%Sep 3, 2026
- High8.0In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype hea…Check if you run itEPSS 0.13%Sep 3, 2026
- High7.3In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie bpf_tcp_gen_syncookie and bpf_tcp_che…Check if you run itEPSS 0.17%Sep 3, 2026
Sort