Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.33%Aug 11, 2026
- Medium6.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.91%Aug 11, 2026
- Medium5.4CVE-2026-57105 is listed by inventory_critical.Check if you run itEPSS 0.62%Aug 11, 2026
- Critical9.4Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.83%Aug 11, 2026
- Medium5.4インテルのAI Reference Modelsにおける保護メカニズムの不具合に関する脆弱性Check if you run itEPSS 0.16%Aug 11, 2026
- Medium6.9インテルのOpen VKLにおけるヒープベースのバッファオーバーフローの脆弱性Check if you run itEPSS 0.11%Aug 11, 2026
- Medium6.8Vim is an open source, command line text editor.Check if you run itEPSS 0.19%Aug 11, 2026
- Medium5.3A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding.Check if you run itEPSS 1.03%Aug 11, 2026
- Critical10.0Missing Authentication for Critical FunctionalityPatch nowKEVEPSS 0.95%Aug 11, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityPatch nowKEVEPSS 90.49%Aug 11, 2026
- Medium6.0Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0Check if you run itEPSS 0.17%Aug 11, 2026
- Medium5.2Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0Check if you run itEPSS 0.13%Aug 11, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 8.19%Aug 11, 2026
- Medium4.3Unauthorised modification of records due to missing validationOpen the advisoryAug 11, 2026
- High7.1A flaw was found in MRTG.Check if you run itEPSS 0.14%Aug 11, 2026
- High7.5A flaw was found in Wildfly.Check if you run itEPSS 0.89%Aug 11, 2026
- High7.5A flaw was found in Undertow.Check if you run itEPSS 1.02%Aug 11, 2026
- High7.4A flaw was found in EAP's IIOP.Check if you run itEPSS 0.66%Aug 11, 2026
- High7.5A flaw was found in EAP's jboss-remoting.Check if you run itEPSS 0.89%Aug 11, 2026
- High7.5A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder.Check if you run itEPSS 0.72%Aug 11, 2026
- High8.1when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated a…Check if you run itEPSS 0.65%Aug 11, 2026
- High8.1A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forg…Check if you run itEPSS 0.30%Aug 11, 2026
- High8.8A flaw was found in JBoss marshalling.Check if you run itEPSS 0.84%Aug 11, 2026
- High7.4the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication.Check if you run itEPSS 0.48%Aug 11, 2026
- Critical9.8A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauth…Check if you run itEPSS 0.43%Aug 11, 2026
Sort