Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malCheck if you run itEPSS 0.24%Oct 14, 2025
- Medium5.4Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malCheck if you run itEPSS 0.24%Oct 14, 2025
- Medium5.4Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malCheck if you run itEPSS 0.24%Oct 14, 2025
- Medium4.8Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could bCheck if you run itEPSS 0.27%Oct 14, 2025
- Medium5.9Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability.Check if you run itEPSS 0.55%Oct 14, 2025
- High8.4Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled contain an authenticated remote code execution vulnerability and node VM sandbox escape due to insecuCheck if you run itEPSS 6.56%Oct 14, 2025
- High8.6FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.Check this weekEPSS 38.76%Oct 14, 2025
- High8.5FreePBX is an open source GUI for managing Asterisk.Check if you run itEPSS 0.19%Oct 14, 2025
- Medium5.5NVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of memory allocations could allow a local attacker to cause memory overallocation.Check if you run itEPSS 0.12%Oct 14, 2025
- High7.6NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the Linux Device Tree.Check if you run itEPSS 0.32%Oct 14, 2025
- Medium5.5Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.16%Oct 14, 2025
- High8.4NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing.Check if you run itEPSS 0.16%Oct 14, 2025
- Medium5.5Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.40%Oct 14, 2025
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.43%Oct 14, 2025
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.43%Oct 14, 2025
- High8.2External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.44%Oct 14, 2025
- High8.2External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.44%Oct 14, 2025
- Medium5.5Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.61%Oct 14, 2025
- Medium5.5Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.66%Oct 14, 2025
- Critical9.3A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthenticated Remote Code ExeCheck if you run itEPSS 0.52%Oct 14, 2025
- Medium4.3A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions,…Check if you run itEPSS 0.47%Oct 14, 2025
- High7.6Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest verification.Check if you run itEPSS 0.26%Oct 14, 2025
- Low2.9mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail.Check if you run itEPSS 0.43%Oct 14, 2025
- High8.5Home Assistant is open source home automation software that puts local control and privacy first.Check if you run itEPSS 0.42%Oct 14, 2025
- High8.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.47%Oct 14, 2025
Sort