Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.81%Mar 5, 2026
- High7.0Incorrect Authorization vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.API.OAuthController' module) allows Privilege Escalation.Check if you run itEPSS 0.34%Mar 5, 2026
- High7.5Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.64%Mar 5, 2026
- High7.1Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component.Check if you run itEPSS 0.19%Mar 5, 2026
- Medium4.9The Apocalypse Meow plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 22.1.0.Check if you run itEPSS 0.62%Mar 5, 2026
- High8.4A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction.Check if you run itEPSS 0.22%Mar 5, 2026
- High8.3Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Check if you run itEPSS 0.39%Mar 4, 2026
- Medium6.7A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to e…Check if you run itEPSS 0.34%Mar 4, 2026
- Medium6.0A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root.Check if you run itEPSS 0.20%Mar 4, 2026
- High7.2A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker wi…Check if you run itEPSS 0.13%Mar 4, 2026
- Medium5.9A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could a…Check if you run itEPSS 0.44%Mar 4, 2026
- Medium6.0A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root.Check if you run itEPSS 0.17%Mar 4, 2026
- Medium6.0A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De…Check if you run itEPSS 0.14%Mar 4, 2026
- Medium4.9A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.29%Mar 4, 2026
- High8.1A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an…Check if you run itEPSS 0.35%Mar 4, 2026
- Medium6.5A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.34%Mar 4, 2026
- Critical9.8An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write…Check if you run itEPSS 0.67%Mar 4, 2026
- Medium4.9A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-op…Check if you run itEPSS 0.35%Mar 4, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix out-of-bounds access in sysfs attribute read/write Some f2fs sysfs attributes suffer from…Check if you run itEPSS 0.16%Mar 4, 2026
- Medium6.6erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json.Check if you run itEPSS 0.24%Mar 4, 2026
- Medium6.5The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the AJAX action with .Check if you run itEPSS 0.43%Mar 4, 2026
- Medium4.3The Seraphinite Accelerator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the AJAX action with in all ve…Check if you run itEPSS 0.35%Mar 4, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.18%Mar 4, 2026
- Critical9.3Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis.Check if you run itEPSS 1.18%Mar 4, 2026
- Critical10.0An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver.Check if you run itEPSS 1.13%Mar 4, 2026