Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A vulnerability was identified in Align Technology My Invisalign App 3.12.4 on Android.Check if you run itEPSS 0.10%Apr 3, 2026
- High8.2An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15.Check if you run itEPSS 0.39%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.37%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.40%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.40%Apr 3, 2026
- Medium4.2An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.24%Apr 3, 2026
- Medium6.5An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14.Check if you run itEPSS 0.39%Apr 3, 2026
- Medium6.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.25%Apr 3, 2026
- Low3.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.41%Apr 3, 2026
- High7.5An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.47%Apr 3, 2026
- Medium5.3In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for cra…Check if you run itEPSS 0.24%Apr 3, 2026
- High7.8In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and…Check if you run itEPSS 0.17%Apr 3, 2026
- Critical9.8Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.91%Apr 3, 2026
- High8.7Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using…Check if you run itEPSS 0.44%Apr 2, 2026
- Critical9.2HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote att…Check if you run itEPSS 0.51%Apr 2, 2026
- High8.7Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment.Check if you run itEPSS 0.43%Apr 2, 2026
- Medium6.9Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages.Check if you run itEPSS 0.28%Apr 2, 2026
- Critical9.2OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.55%Apr 2, 2026
- Medium6.1hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.40%Apr 2, 2026
- High8.1OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.26%Apr 2, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.25%Apr 2, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.17%Apr 2, 2026
- Medium6.5Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.30%Apr 2, 2026
- High8.5NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Check if you run itEPSS 0.41%Apr 2, 2026
- Low2.7Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.18%Apr 2, 2026
Sort