Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reality, only the certificate nu…Check if you run itEPSS 0.09%Mar 2, 2026
- Critical9.0The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user account by supplying only the username, without…Check if you run itEPSS 0.25%Mar 2, 2026
- High8.8SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database…Check if you run itEPSS 0.18%Mar 2, 2026
- Low1.3Canarytokens help track activity and actions on a network.Check if you run itEPSS 0.46%Feb 27, 2026
- Medium5.7ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.33%Feb 27, 2026
- Medium6.4calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.33%Feb 27, 2026
- Medium6.5Beszel is a server monitoring platform.Check if you run itEPSS 0.52%Feb 27, 2026
- Low2.0ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.26%Feb 27, 2026
- Medium6.5The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authenticat…Check if you run itEPSS 0.22%Feb 27, 2026
- Medium5.1PluXml CMS is vulnerable to Stored XSS in file uploading functionality.Check if you run itEPSS 0.18%Feb 27, 2026
- UnknownSecurity update for kubevirtOpen the advisoryFeb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.Check if you run itEPSS 0.17%Feb 27, 2026
- Low1.9A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1.Check if you run itEPSS 0.20%Feb 27, 2026
- High7.8telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementat…Check if you run itEPSS 0.20%Feb 27, 2026
- High7.4A vulnerability was determined in Tenda F453 1.0.0.3.Check if you run itEPSS 1.07%Feb 27, 2026
- High8.5Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/pro…Check if you run itEPSS 0.42%Feb 26, 2026
- High7.2Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling.Check if you run itEPSS 0.15%Feb 26, 2026
- Low2.1Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path.Check if you run itEPSS 0.17%Feb 26, 2026
- Medium4.3A flaw was found in the FTP GVfs backend.Check if you run itEPSS 0.31%Feb 26, 2026
- Medium5.3A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker…Check if you run itEPSS 0.21%Feb 26, 2026
- Medium5.3The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.Check if you run itEPSS 0.12%Feb 26, 2026
- Low2.3Some HTTP security headers are not properly set by the web server when sending responses to the client application.Check if you run itEPSS 0.15%Feb 26, 2026
- Medium5.3An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included.Check if you run itEPSS 0.21%Feb 26, 2026
- High8.4The installer of FinalCode Client provided by Digital Arts Inc.Check if you run itEPSS 0.14%Feb 26, 2026
- High8.5The installer of FinalCode Client provided by Digital Arts Inc.Check if you run itEPSS 0.12%Feb 26, 2026