Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.2A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an a…Check if you run itEPSS 0.15%Mar 4, 2026
- Low3.1A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3).Check if you run itEPSS 0.16%Mar 4, 2026
- High8.1A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Ke…Check if you run itEPSS 0.28%Mar 4, 2026
- High7.0Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default.Check if you run itEPSS 0.50%Mar 4, 2026
- Medium6.5A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to…Check if you run itEPSS 0.48%Mar 4, 2026
- Medium6.3The server certificate was not verified when an Arc agent connected to a Guardian or CMC.Check if you run itEPSS 0.11%Mar 4, 2026
- Medium6.1The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter in all versions up to, and including, 4.7.1 du…Check if you run itEPSS 0.24%Mar 4, 2026
- Critical9.3Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis.Check if you run itEPSS 1.18%Mar 4, 2026
- High8.8WARNING: Users of 6.x should upgrade to 6.2.4 or later as the fix was missed in previous 6.x releases.Check if you run itEPSS 0.79%Mar 4, 2026
- High7.4HomeBox is a home inventory and organization system.Check if you run itEPSS 0.40%Mar 3, 2026
- High8.2Underscore.js is a utility-belt library for JavaScript.Check if you run itEPSS 1.03%Mar 3, 2026
- Medium6.1AliasVault is a privacy-first password manager with built-in email aliasing.Check if you run itEPSS 0.38%Mar 3, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.45%Mar 3, 2026
- Medium5.3A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38.Check if you run itEPSS 4.49%Mar 3, 2026
- High7.2Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.dep…Check if you run itEPSS 3.75%Mar 3, 2026
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management…Check if you run itEPSS 0.34%Mar 3, 2026
- Medium5.3Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0.Check if you run itEPSS 0.34%Mar 3, 2026
- Critical9.8OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.Check if you run itEPSS 0.41%Mar 3, 2026
- Medium5.7Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator…Check if you run itEPSS 0.07%Mar 3, 2026
- High8.8AFFiNE is an open-source, all-in-one workspace and an operating system.Check if you run itEPSS 0.62%Mar 2, 2026
- High7.5Textream is a free macOS teleprompter app.Check if you run itEPSS 0.40%Mar 2, 2026
- Medium5.3The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching…Check if you run itEPSS 0.19%Mar 2, 2026
- Medium5.3The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protection…Check if you run itEPSS 0.18%Mar 2, 2026
- High7.1The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks.Check if you run itEPSS 0.22%Mar 2, 2026
- Critical9.4In the endpoints "/cgi-bin/CliniNET.prd/utils/usrlogstat_simple.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", "/cgi-bin/CliniNET.prd/utils/userlogstat2.pl", and "/…Check if you run itEPSS 0.54%Mar 2, 2026