Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability…Check if you run itEPSS 0.65%May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that coul…Check if you run itEPSS 0.41%May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that coul…Check if you run itEPSS 0.56%May 12, 2026
- High7.5A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve re…Check if you run itEPSS 0.53%May 12, 2026
- High7.5A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending speci…Check if you run itEPSS 0.40%May 12, 2026
- High7.5Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.33%May 12, 2026
- High7.5Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.33%May 12, 2026
- Critical9.4An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax.Check if you run itEPSS 0.37%May 12, 2026
- Critical9.2SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to…Check if you run itEPSS 0.43%May 12, 2026
- High8.7SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server.Check if you run itEPSS 0.50%May 12, 2026
- High7.8Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of…Check if you run itEPSS 0.15%May 12, 2026
- High7.8Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of…Check if you run itEPSS 0.15%May 12, 2026
- High7.8Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of…Check if you run itEPSS 0.15%May 12, 2026
- High7.8Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of…Check if you run itEPSS 0.15%May 12, 2026
- Medium6.3Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that…Check if you run itEPSS 0.18%May 12, 2026
- Critical9.3Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…Check if you run itEPSS 0.44%May 12, 2026
- Critical9.6Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code executio…Check if you run itEPSS 0.64%May 12, 2026
- High7.2A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection.Check if you run itEPSS 0.96%May 12, 2026
- Medium5.3A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition.Check if you run itEPSS 0.26%May 12, 2026
- High7.2A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under cer…Check if you run itEPSS 0.62%May 12, 2026
- High7.2A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands…Check if you run itEPSS 0.56%May 12, 2026
- High8.8A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbit…Check if you run itEPSS 0.27%May 12, 2026
- High8.8HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack.Check if you run itEPSS 8.16%May 12, 2026
- Medium6.0HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack.Check if you run itEPSS 0.17%May 12, 2026
- Medium6.0HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack.Check if you run itEPSS 0.13%May 12, 2026
Sort