Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The protocol used for remote linking over RF for End-of-Train and Head-of-Train (also known as a FRED) relies on a BCH checksum for packet creation.Check if you run itEPSS 0.63%Jul 10, 2025
- Medium4.1Meshtastic is an open source mesh networking solution.Check if you run itEPSS 0.39%Jul 10, 2025
- Medium4.3Meshtastic is an open source mesh networking solution.Check if you run itEPSS 0.44%Jul 10, 2025
- Medium6.7Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands.Check if you run itEPSS 0.15%Jul 10, 2025
- Medium5.1Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command lineCheck if you run itEPSS 0.15%Jul 10, 2025
- Medium5.3Tenda o3_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.62%Jul 10, 2025
- High8.2The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.37%Jul 10, 2025
- High8.2The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.55%Jul 10, 2025
- Critical9.4The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.79%Jul 10, 2025
- Medium6.5The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.27%Jul 10, 2025
- High8.6The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA).Check if you run itEPSS 0.50%Jul 10, 2025
- High7.5The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications.Check if you run itEPSS 0.42%Jul 10, 2025
- Critical9.3An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint.Check if you run itEPSS 6.22%Jul 10, 2025
- High8.6An unrestricted file upload vulnerability exists in ProcessMaker versions prior to 3.5.4 due to improper handling of uploaded plugin archives.Check if you run itEPSS 1.72%Jul 10, 2025
- Medium6.9Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user inputCheck if you run itEPSS 0.36%Jul 10, 2025
- Medium6.5Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service via network access.Check if you run itEPSS 0.55%Jul 10, 2025
- High7.1A flaw was found in Keycloak.Check if you run itEPSS 0.27%Jul 10, 2025
- Low2.1NETGEAR d6400_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.13%Jul 10, 2025
- Medium4.3IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gatherCheck if you run itEPSS 0.32%Jul 10, 2025
- Medium5.3IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.Check if you run itEPSS 0.34%Jul 10, 2025
- Medium6.5A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.Check if you run itEPSS 0.90%Jul 10, 2025
- Low2.7An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintainers to bypass group-leCheck if you run itEPSS 0.36%Jul 10, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO: task syz-executor140:530Check if you run itEPSS 0.19%Jul 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens with a buggy module: BUG:Check if you run itEPSS 0.20%Jul 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that caller of fbnic_mbx_map_msg(Check if you run itEPSS 0.18%Jul 10, 2025
Sort