Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.37%Apr 30, 2026
- Critical9.8IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check.Check if you run itEPSS 0.20%Apr 30, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.34%Apr 30, 2026
- Medium5.5IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.Check if you run itEPSS 0.09%Apr 30, 2026
- High7.5IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods withou…Check if you run itEPSS 0.19%Apr 30, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.24%Apr 30, 2026
- Medium5.3IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.22%Apr 30, 2026
- Low2.0A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.25%Apr 30, 2026
- High8.6SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without paramete…Check if you run itEPSS 0.53%Apr 30, 2026
- Medium4.6Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information dis…Check if you run itEPSS 0.19%Apr 30, 2026
- High7.5IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.Check if you run itEPSS 0.34%Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system.Check if you run itEPSS 0.27%Apr 30, 2026
- Medium6.3Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.37%Apr 30, 2026
- Medium4.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.25%Apr 30, 2026
- Medium6.8CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50.Check if you run itEPSS 0.10%Apr 30, 2026
- High7.1CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50.Check if you run itEPSS 0.25%Apr 30, 2026
- Medium6.8CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.10%Apr 30, 2026
- High7.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.77%Apr 30, 2026
- Medium6.4IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.16%Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.17%Apr 30, 2026
- High7.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.48%Apr 30, 2026
- High7.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.27%Apr 30, 2026
- Medium5.9CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.10%Apr 30, 2026
- High8.5CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.10%Apr 30, 2026
- Low2.3CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50.Check if you run itEPSS 0.16%Apr 30, 2026
Sort