Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.59%Oct 14, 2025
- Medium5.4EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.14%Oct 14, 2025
- Medium5.3IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL.Check if you run itEPSS 0.31%Oct 14, 2025
- Medium5.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means.Check if you run itEPSS 0.15%Oct 14, 2025
- Medium4.6APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing.Check if you run itEPSS 0.16%Oct 14, 2025
- Medium5.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local.Check if you run itEPSS 0.15%Oct 14, 2025
- Medium5.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local.Check if you run itEPSS 0.15%Oct 14, 2025
- High8.5A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavCheck if you run itEPSS 0.26%Oct 14, 2025
- High8.1The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname.Check if you run itEPSS 0.27%Oct 14, 2025
- High8.5A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx.Check if you run itEPSS 0.18%Oct 14, 2025
- High8.5A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx.Check if you run itEPSS 0.18%Oct 14, 2025
- High8.7A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE.Check if you run itEPSS 0.46%Oct 14, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Oct 14, 2025
- High7.3A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6).Check if you run itEPSS 0.14%Oct 14, 2025
- High7.3A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6).Check if you run itEPSS 0.14%Oct 14, 2025
- High7.3A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6).Check if you run itEPSS 0.14%Oct 14, 2025
- High7.3A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6).Check if you run itEPSS 0.14%Oct 14, 2025
- Medium6.7A vulnerability has been identified in SiPass integrated (All versions < V3.0).Check if you run itEPSS 0.14%Oct 14, 2025
- Medium5.1A vulnerability has been identified in SiPass integrated (All versions < V3.0).Check if you run itEPSS 0.20%Oct 14, 2025
- Critical9.3A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMCheck if you run itEPSS 0.53%Oct 14, 2025
- Critical9.3A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3).Check if you run itEPSS 0.53%Oct 14, 2025
- Medium5.5In gnss driver, there is a possible out of bounds read due to an integer overflow.Check if you run itEPSS 0.09%Oct 14, 2025
- High8.8An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total lossCheck if you run itEPSS 0.85%Oct 14, 2025
- High7.5A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI.Check if you run itEPSS 0.24%Oct 14, 2025
- Medium6.8An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.Check if you run itEPSS 0.46%Oct 14, 2025
Sort