Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.41%May 13, 2026
- Medium6.7CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Check if you run itEPSS 0.37%May 13, 2026
- High8.3CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Patch nowKEVEPSS 1.82%May 13, 2026
- Medium6.1CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Check if you run itEPSS 0.12%May 13, 2026
- Medium6.6CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Check if you run itEPSS 0.19%May 13, 2026
- Low3.8Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user v…Check if you run itEPSS 0.13%May 13, 2026
- Medium5.3Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data.Check if you run itEPSS 0.30%May 13, 2026
- High8.7Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET method…Check if you run itEPSS 0.21%May 13, 2026
- High7.8Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.Check if you run itEPSS 0.12%May 13, 2026
- High7.8External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an…Check if you run itEPSS 0.12%May 13, 2026
- Medium4.3Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.Check if you run itEPSS 0.14%May 13, 2026
- Medium6.0Hermes WebUI prior to 0.51.44 contains a path traversal vulnerability in the session import endpoint that allows authenticated attackers to read arbitrary files by imp…Check if you run itEPSS 0.38%May 13, 2026
- Medium6.6Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (D…Check if you run itEPSS 0.36%May 13, 2026
- Medium6.1Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary…Check if you run itEPSS 1.40%May 13, 2026
- Medium5.0An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete a…Check if you run itEPSS 0.34%May 13, 2026
- Medium4.8A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the f…Check if you run itEPSS 0.33%May 13, 2026
- Medium4.4A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload…Check if you run itEPSS 0.16%May 13, 2026
- Medium5.9Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM…Check if you run itEPSS 0.18%May 13, 2026
- Medium5.2CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)Check if you run itEPSS 0.39%May 13, 2026
- Medium4.9Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and pot…Check if you run itEPSS 0.11%May 13, 2026
- Medium6.2An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack…Check if you run itEPSS 0.19%May 13, 2026
- Medium5.9Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execut…Check if you run itEPSS 0.15%May 13, 2026
- Medium5.9A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalat…Check if you run itEPSS 0.15%May 13, 2026
- Medium4.3Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials.Check if you run itEPSS 0.14%May 13, 2026
- Medium5.2An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.Check if you run itEPSS 0.22%May 13, 2026
Sort