Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.Check if you run itEPSS 0.73%Aug 18, 2026
- High8.6A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01.Check if you run itEPSS 0.60%Aug 18, 2026
- Medium5.5A vulnerability was identified in code-projects Task Management System 1.0.Check if you run itEPSS 0.43%Aug 18, 2026
- Medium6.5Clickjacking issue in the Downloads component in Firefox for Android.Check if you run itEPSS 0.27%Aug 18, 2026
- Medium5.4Spoofing issue in the Downloads component in Firefox for Android.Check if you run itEPSS 0.25%Aug 18, 2026
- Medium6.5Clickjacking issue in Firefox for Android.Check if you run itEPSS 0.27%Aug 18, 2026
- Medium5.2External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.Check if you run itEPSS 0.18%Aug 18, 2026
- Medium5.3Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.31%Aug 18, 2026
- UnknownCGA-vwq3-r8g8-q256Open the advisoryAug 18, 2026
- Medium4.3Improper access control on the back-office notifications endpoint exposes customer dataOpen the advisoryAug 18, 2026
- Medium6.5SQL injection through back-office list filtersOpen the advisoryAug 18, 2026
- High7.3Client IP address can be spoofed through the X-Forwarded-For headerOpen the advisoryAug 18, 2026
- High8.0Formula injection in CSV exports (CSV injection)Open the advisoryAug 18, 2026
- High8.2Server-Side Request Forgery through image URLs in the CSV importOpen the advisoryAug 18, 2026
- High8.4ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticate…Check if you run itEPSS 0.55%Aug 18, 2026
- Critical9.3ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write,…Check if you run itEPSS 0.89%Aug 18, 2026
- High8.7ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcadedb-gremlin) in versions <= 26.7.3 enforces authentication (SASL PLAIN) but performs no authorization: it ne…Check if you run itEPSS 0.59%Aug 18, 2026
- Critical9.3ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin.Check if you run itEPSS 0.66%Aug 18, 2026
- Critical9.4ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate the authenticated principal to asynchronous command worker threads.Check if you run itEPSS 0.39%Aug 18, 2026
- Low2.3ArcadeDB before 26.8.1 fails to bind the authenticated principal (setCurrentUser) on its batch and time-series HTTP handlers.Check if you run itEPSS 0.21%Aug 18, 2026
- High7.1ArcadeDB before 26.8.1 (affected versions <= 26.7.3) contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement.Check if you run itEPSS 0.35%Aug 18, 2026
- Medium5.3ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the set_server_setting MCP server-level tool.Check if you run itEPSS 0.29%Aug 18, 2026
- High7.1ArcadeDB versions before 26.8.1 contain a server-side request forgery vulnerability in the IMPORT DATABASE command where the security validator resolves and checks hos…Check if you run itEPSS 0.32%Aug 18, 2026
- Critical9.4ArcadeDB before 26.8.1 fails to bind the authenticated principal on the gRPC transaction executor thread in beginTransaction, allowing authenticated readers to execute…Check if you run itEPSS 0.38%Aug 18, 2026
- High8.3ArcadeDB versions before 26.8.1 contain an arbitrary file read vulnerability in the OpenCypher LOAD CSV FROM clause that allows authenticated users to read local files.Check if you run itEPSS 0.46%Aug 18, 2026
Sort