Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Hirschmann HiLCOS Hard-coded Credentials SSH SSL KeysCheck if you run itEPSS 0.30%Apr 3, 2026
- High7.3OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary…Check if you run itEPSS 0.92%Apr 3, 2026
- High8.7Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by…Check if you run itEPSS 0.39%Apr 3, 2026
- Critical9.1Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to…Check if you run itEPSS 0.51%Apr 3, 2026
- Critical9.1Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor…Check if you run itEPSS 0.28%Apr 3, 2026
- High7.1Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially cr…Check if you run itEPSS 0.28%Apr 3, 2026
- High7.3Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrar…Check if you run itEPSS 0.28%Apr 3, 2026
- Medium6.0OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL.Check if you run itEPSS 0.25%Apr 3, 2026
- Medium6.9Development and test API endpoints are present that mirror production functionality.Check if you run itEPSS 0.33%Apr 3, 2026
- High8.7A specific administrative endpoint is accessible without proper authentication, exposing device management functions.Check if you run itEPSS 0.49%Apr 3, 2026
- Medium6.9A specific administrative endpoint notifications is accessible without proper authentication.Check if you run itEPSS 0.39%Apr 3, 2026
- Critical9.2A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.Check if you run itEPSS 0.44%Apr 3, 2026
- Medium6.1Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.25%Apr 3, 2026
- Medium5.3Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.32%Apr 3, 2026
- Critical9.3A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.Check if you run itEPSS 0.30%Apr 3, 2026
- High8.6prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across…Check if you run itEPSS 0.34%Apr 3, 2026
- High7.1prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated users to…Check if you run itEPSS 0.31%Apr 3, 2026
- High8.7prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metadata gene…Check if you run itEPSS 0.28%Apr 3, 2026
- Medium5.3prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform…Check if you run itEPSS 0.20%Apr 3, 2026
- High8.6prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the client system…Check if you run itEPSS 0.37%Apr 3, 2026
- High8.8Storage credentials are hardcoded in the mobile app and device firmware.Check if you run itEPSS 0.35%Apr 3, 2026
- High7.0Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability in the execution of user-configured external applications that all…Check if you run itEPSS 0.12%Apr 3, 2026
- High8.7Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet leng…Check if you run itEPSS 0.94%Apr 3, 2026
- Critical9.3Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass vulnerability in the master service that allows unauthenticated…Check if you run itEPSS 0.98%Apr 3, 2026
- Medium5.5A weakness has been identified in BookStackApp BookStack up to 26.03.Check if you run itEPSS 0.33%Apr 3, 2026
Sort