Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Specially crafted ZIP archives can escape the intended extraction directory during Node.js download and extraction in Vaadin 14.2.0 through 14.14.0, 15.0.0 through 23.…Check if you run itEPSS 0.36%Mar 10, 2026
- High7.2CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation w…Check if you run itEPSS 0.24%Mar 10, 2026
- Medium5.3A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).Check if you run itEPSS 0.27%Mar 10, 2026
- Medium5.9A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).Check if you run itEPSS 0.13%Mar 10, 2026
- Medium5.9A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).Check if you run itEPSS 0.10%Mar 10, 2026
- High8.8Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.33%Mar 10, 2026
- Medium5.3This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.Check if you run itEPSS 0.90%Mar 10, 2026
- Low3.7An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer…Check if you run itEPSS 0.38%Mar 10, 2026
- Medium6.1The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local…Check if you run itEPSS 0.08%Mar 10, 2026
- Low3.3HCL Sametime for Android is impacted by a sensitive information disclosure.Check if you run itEPSS 0.14%Mar 10, 2026
- Medium6.1An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in benkeen generatedata 4.0.14.Check if you run itEPSS 0.33%Mar 10, 2026
- High7.5SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.Check if you run itEPSS 0.50%Mar 10, 2026
- Medium4.0A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail…Check if you run itEPSS 0.09%Mar 10, 2026
- Medium5.3An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.Check if you run itEPSS 0.32%Mar 10, 2026
- Critical9.8An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device.Check if you run itEPSS 2.24%Mar 10, 2026
- Low2.4A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging Station (All versions < L4.10.1).Check if you run itEPSS 0.15%Mar 10, 2026
- Medium5.1CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attacke…Check if you run itEPSS 0.24%Mar 10, 2026
- High7.5The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the 'ajax_create_import' function.Check if you run itEPSS 0.37%Mar 10, 2026
- Critical9.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.46%Mar 10, 2026
- Medium4.6Flarum is open-source forum software.Check if you run itEPSS 0.18%Mar 10, 2026
- Critical9.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.41%Mar 10, 2026
- Medium6.5PowerSync Service is the server-side component of the PowerSync sync engine.Check if you run itEPSS 0.21%Mar 10, 2026
- Critical9.8SiYuan is a personal knowledge management system.Check if you run itEPSS 1.11%Mar 10, 2026
- Critical9.0Appsmith is a platform to build admin panels, internal tools, and dashboards.Check if you run itEPSS 0.32%Mar 10, 2026
- High7.3If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated right…Check if you run itEPSS 0.09%Mar 10, 2026
Sort