Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.24%Apr 3, 2026
- Medium4.7util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.16%Apr 3, 2026
- Medium6.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.29%Apr 3, 2026
- Critical9.3Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that al…Check if you run itEPSS 0.83%Apr 3, 2026
- High8.6Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnera…Check if you run itEPSS 0.22%Apr 3, 2026
- High8.8Hirschmann HiLCOS Hard-coded Credentials SSH SSL KeysCheck if you run itEPSS 0.30%Apr 3, 2026
- High7.3OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary…Check if you run itEPSS 0.92%Apr 3, 2026
- High8.7Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by…Check if you run itEPSS 0.39%Apr 3, 2026
- Critical9.1Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to…Check if you run itEPSS 0.51%Apr 3, 2026
- Critical9.1Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor…Check if you run itEPSS 0.28%Apr 3, 2026
- High7.1Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially cr…Check if you run itEPSS 0.28%Apr 3, 2026
- High7.3Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrar…Check if you run itEPSS 0.28%Apr 3, 2026
- Medium6.0OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL.Check if you run itEPSS 0.25%Apr 3, 2026
- Medium6.9Development and test API endpoints are present that mirror production functionality.Check if you run itEPSS 0.33%Apr 3, 2026
- High8.7A specific administrative endpoint is accessible without proper authentication, exposing device management functions.Check if you run itEPSS 0.49%Apr 3, 2026
- Medium6.9A specific administrative endpoint notifications is accessible without proper authentication.Check if you run itEPSS 0.39%Apr 3, 2026
- Critical9.2A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.Check if you run itEPSS 0.44%Apr 3, 2026
- Medium6.1Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.25%Apr 3, 2026
- Medium5.3Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.32%Apr 3, 2026
- Critical9.3A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.Check if you run itEPSS 0.30%Apr 3, 2026
- High8.6prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across…Check if you run itEPSS 0.34%Apr 3, 2026
- High7.1prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated users to…Check if you run itEPSS 0.31%Apr 3, 2026
- High8.7prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metadata gene…Check if you run itEPSS 0.28%Apr 3, 2026
- Medium5.3prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform…Check if you run itEPSS 0.20%Apr 3, 2026
- High8.6prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the client system…Check if you run itEPSS 0.37%Apr 3, 2026
Sort