Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions.Check if you run itEPSS 0.32%Oct 9, 2026
- High8.1Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain mul…Check if you run itEPSS 0.32%Oct 9, 2026
- Critical9.1The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity.Check if you run itEPSS 0.37%Oct 9, 2026
- High8.2Reusing a Nonce, Key Pair in EncryptionCheck if you run itEPSS 0.41%Oct 9, 2026
- UnknownAsh.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sortsCheck if you run itEPSS 0.27%Oct 9, 2026
- High7.8Checksum database bypass for golang.org/toolchain in cmd/goCheck if you run itEPSS 0.10%Oct 8, 2026
- High7.8Checksum bypass for golang.org/fips140 in cmd/goCheck if you run itEPSS 0.09%Oct 8, 2026
- UnknownRoot.Mkdir(All) can follow junctions out of the root on Windows in osCheck if you run itEPSS 0.49%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.Check if you run itEPSS 0.41%Oct 8, 2026
- Medium6.3Parse Server 9.0.0 before 9.10.1 Class Name Disclosure via GraphQL ErrorsCheck if you run itEPSS 0.33%Oct 8, 2026
- High8.7An authentication flaw exists in the Brocade ASCG administrative management service component.Check if you run itEPSS 0.21%Oct 8, 2026
- High8.6A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.24%Oct 8, 2026
- Medium6.9A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versio…Check if you run itEPSS 0.19%Oct 8, 2026
- High8.5A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS vers…Check if you run itEPSS 1.44%Oct 8, 2026
- High7.7An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform.Check if you run itEPSS 0.19%Oct 8, 2026
- High8.5An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an aut…Check if you run itEPSS 1.46%Oct 8, 2026
- Medium5.4An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS…Check if you run itEPSS 3.10%Oct 8, 2026
- High7.3A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d a…Check if you run itEPSS 0.10%Oct 8, 2026
- Medium5.9An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.43%Oct 8, 2026
- Medium5.4An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.61%Oct 8, 2026
- High8.5A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1.Check if you run itEPSS 0.12%Oct 8, 2026
- High7.1An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0…Check if you run itEPSS 0.67%Oct 8, 2026
- High7.0Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings.Check if you run itEPSS 0.25%Oct 8, 2026
- Medium6.8Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.Check if you run itEPSS 0.19%Oct 8, 2026
- Low2.1A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.Check if you run itEPSS 0.14%Oct 8, 2026