Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated a…Check if you run itEPSS 0.77%Aug 11, 2026
- High8.1A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forg…Check if you run itEPSS 0.33%Aug 11, 2026
- High8.8A flaw was found in JBoss marshalling.Check if you run itEPSS 0.95%Aug 11, 2026
- High7.4the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication.Check if you run itEPSS 0.57%Aug 11, 2026
- Critical9.8A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauth…Check if you run itEPSS 0.46%Aug 11, 2026
- Medium6.5A flaw was found in wildfly-core.Check if you run itEPSS 0.52%Aug 11, 2026
- High7.3Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Co…Check if you run itEPSS 0.32%Aug 11, 2026
- High7.6SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input.Check if you run itEPSS 0.40%Aug 11, 2026
- Low3.7SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enab…Check if you run itEPSS 0.19%Aug 11, 2026
- Critical9.1SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which…Check if you run itEPSS 0.77%Aug 11, 2026
- Medium5.3SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands.Check if you run itEPSS 0.47%Aug 11, 2026
- Critical9.8SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption.Check if you run itEPSS 0.64%Aug 11, 2026
- High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 0.33%Aug 11, 2026
- High8.6Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityPatch nowKEVEPSS 1.01%Aug 11, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.38%Aug 11, 2026
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.62%Aug 11, 2026
- UnknownWeaver E-cology 8.0 SQL Injection File Read via SignatureDownLoadPatch nowKEVEPSS 0.63%Aug 11, 2026
- High8.4tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supp…Check if you run itEPSS 0.17%Aug 10, 2026
- Critical9.3react18-use is a React 19 use hook shim.Check if you run itEPSS 0.67%Aug 10, 2026
- Low2.5The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP bloc…Check if you run itEPSS 0.10%Aug 10, 2026
- Low3.7The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths.Check if you run itEPSS 0.40%Aug 10, 2026
- Medium4.3Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.33%Aug 10, 2026
- Medium5.4Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.22%Aug 10, 2026
- Medium5.9AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.35%Aug 10, 2026
- Medium5.3npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary termi…Check if you run itEPSS 0.37%Aug 10, 2026
Sort