Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporation (IDC) SFX Series SuperFlex Satelli…Check if you run itEPSS 3.02%Mar 4, 2026
- Critical9.3The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interf…Check if you run itEPSS 2.59%Mar 4, 2026
- Medium5.3A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver…Check if you run itEPSS 0.82%Mar 4, 2026
- High8.4OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.Check if you run itEPSS 0.22%Mar 3, 2026
- High8.8The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operatio…Check if you run itEPSS 0.72%Mar 3, 2026
- High8.3Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration.Check if you run itEPSS 0.40%Mar 3, 2026
- Medium5.9IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Co…Check if you run itEPSS 0.19%Mar 3, 2026
- Critical9.3An improper restriction of operations within the bounds of a memory buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticat…Check if you run itEPSS 0.18%Mar 3, 2026
- Low2.5Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server.Check if you run itEPSS 0.07%Mar 3, 2026
- Medium5.7Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator…Check if you run itEPSS 0.07%Mar 3, 2026
- Medium6.5A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands t…Check if you run itEPSS 1.64%Mar 2, 2026
- Medium6.9AFFiNE is an open-source, all-in-one workspace and an operating system.Check if you run itEPSS 0.30%Mar 2, 2026
- High8.8AFFiNE is an open-source, all-in-one workspace and an operating system.Check if you run itEPSS 0.62%Mar 2, 2026
- Critical9.9ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.61%Mar 2, 2026
- Medium5.3An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operatio…Check if you run itEPSS 0.14%Mar 2, 2026
- Medium6.5ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.24%Mar 2, 2026
- High7.0Chamilo is a learning management system.Check if you run itEPSS 0.38%Mar 2, 2026
- Critical9.8On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions.Check if you run itEPSS 0.64%Mar 2, 2026
- Medium5.3Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability tha…Check if you run itEPSS 0.42%Feb 27, 2026
- High7.8Vim is an open source, command line text editor.Check if you run itEPSS 1.46%Feb 27, 2026
- High8.8Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.47%Feb 27, 2026
- Medium5.7ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL…Check if you run itEPSS 0.42%Feb 27, 2026
- UnknownSecurity update for kubevirtOpen the advisoryFeb 27, 2026
- High7.8In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain.Check if you run itEPSS 0.33%Feb 27, 2026