Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.6A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet throughCheck if you run itEPSS 0.59%Nov 13, 2025
- High8.1Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.Check if you run itEPSS 0.42%Nov 13, 2025
- High7.8Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability.Check if you run itEPSS 0.13%Nov 13, 2025
- Medium5.5Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability.Check if you run itEPSS 0.11%Nov 13, 2025
- Medium6.6Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain an Improper Access Control vulnerability.Check if you run itEPSS 0.11%Nov 13, 2025
- Medium6.6Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability.Check if you run itEPSS 0.12%Nov 13, 2025
- High7.8Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Action vulnerability.Check if you run itEPSS 0.14%Nov 13, 2025
- Medium6.9A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.47%Nov 13, 2025
- Medium6.9Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAPCheck if you run itEPSS 0.33%Nov 13, 2025
- Medium6.9Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAPCheck if you run itEPSS 0.32%Nov 13, 2025
- Medium6.1Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attackerCheck if you run itEPSS 0.15%Nov 13, 2025
- Low3.1Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the Add Channel Member API which allows users from one team to acCheck if you run itEPSS 0.20%Nov 13, 2025
- Medium4.3A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges.Check if you run itEPSS 0.29%Nov 13, 2025
- Medium6.1A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack againsCheck if you run itEPSS 0.24%Nov 13, 2025
- Medium6.3A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user.Check if you run itEPSS 0.39%Nov 13, 2025
- Medium6.5Astro is a web framework.Check if you run itEPSS 1.24%Nov 13, 2025
- Medium6.3MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.21%Nov 13, 2025
- High7.4MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.22%Nov 13, 2025
- Medium5.3js-yaml is a JavaScript YAML parser and dumper.Check if you run itEPSS 0.42%Nov 13, 2025
- High7.4ZITADEL is an open source identity management platform.Check if you run itEPSS 0.50%Nov 13, 2025
- Medium5.8PrivateBin is an online pastebin where the server has zero knowledge of pasted data.Check if you run itEPSS 0.53%Nov 13, 2025
- High8.1Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via networCheck if you run itEPSS 0.32%Nov 13, 2025
- Medium5.3Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated user to conduct a disclosure of information via network access.Check if you run itEPSS 0.29%Nov 13, 2025
- Medium4.8Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.Check if you run itEPSS 0.11%Nov 13, 2025
- High7.5External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.Check if you run itEPSS 0.33%Nov 13, 2025
Sort