Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21,…Check if you run itEPSS 0.40%May 20, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with…Check if you run itEPSS 0.48%May 20, 2026
- Medium6.5In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted thr…Check if you run itEPSS 0.32%May 20, 2026
- Medium5.3Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior le…Check if you run itEPSS 0.41%May 20, 2026
- Medium6.0The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation.Check if you run itEPSS 0.30%May 20, 2026
- High8.1A flaw was found in Keycloak.Check if you run itEPSS 0.31%May 20, 2026
- High7.2The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0][cost_of_goods_value]' parameter in versions up…Check if you run itEPSS 0.26%May 20, 2026
- High8.8InfoScale CmdServer before 7.4.2 mishandles access control.Check if you run itEPSS 0.38%May 20, 2026
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clickin…Check if you run itEPSS 0.20%May 20, 2026
- Medium5.4InfoScale VIOM 9.1.3 allows XSS.Check if you run itEPSS 0.21%May 20, 2026
- Medium6.5SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.Check if you run itEPSS 0.31%May 20, 2026
- Critical10.0A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with t…Check if you run itEPSS 0.83%May 20, 2026
- Medium6.3A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands o…Check if you run itEPSS 0.42%May 20, 2026
- High7.2A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underl…Check if you run itEPSS 0.44%May 20, 2026
- Medium6.8A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX…Check if you run itEPSS 0.47%May 20, 2026
- Medium6.0MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based on the email claim when the local account had n…Check if you run itEPSS 0.18%May 20, 2026
- Critical9.1An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras.Check if you run itEPSS 0.51%May 20, 2026
- High7.5Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.Check if you run itEPSS 0.36%May 20, 2026
- High7.5Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.28%May 20, 2026
- High7.5Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding.Check if you run itEPSS 0.40%May 20, 2026
- High7.6Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Software Design Industry and Trade Ltd.Check if you run itEPSS 0.22%May 20, 2026
- Medium5.3The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows…Check if you run itEPSS 0.27%May 20, 2026
- High7.5Buffer Overflow vulnerability in EPSON L14150 FL27PB allows a remote attacker to execute arbitrary code via the RAW Printing Service (JetDirect) on TCP port 9100Check if you run itEPSS 0.65%May 20, 2026
- High7.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability.Check if you run itEPSS 0.35%May 20, 2026
- Medium4.1Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by e…Check if you run itEPSS 0.14%May 20, 2026
Sort