Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.56%Mar 19, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.59%Mar 19, 2026
- Critical9.9Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.55%Mar 19, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.68%Mar 19, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.Check if you run itEPSS 0.58%Mar 19, 2026
- Medium5.3Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.74%Mar 19, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.82%Mar 19, 2026
- Critical9.8Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.81%Mar 19, 2026
- Low2.1In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3.Check if you run itEPSS 0.13%Mar 19, 2026
- Low2.1wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication.Check if you run itEPSS 0.27%Mar 19, 2026
- Critical9.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 1.96%Mar 19, 2026
- Medium4.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.16%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.57%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.22%Mar 19, 2026
- Medium4.3Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to co…Check if you run itEPSS 0.16%Mar 19, 2026
- High7.5ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QU…Check if you run itEPSS 3.12%Mar 19, 2026
- High7.2Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CR…Check if you run itEPSS 0.49%Mar 19, 2026
- Critical9.8An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter componentCheck if you run itEPSS 0.71%Mar 19, 2026
- Medium5.0A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL_d2i_SSL_SESSION() function.Check if you run itEPSS 0.13%Mar 19, 2026
- Medium5.5In wolfSSL 5.8.2 and earlier, a logic flaw existed in the TLS 1.2 server state machine implementation.Check if you run itEPSS 0.13%Mar 19, 2026
- Medium6.5Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.28%Mar 19, 2026
- Medium6.5Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration (host isolation, proc…Check if you run itEPSS 0.20%Mar 19, 2026
- Medium5.7Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153).Check if you run itEPSS 0.25%Mar 19, 2026
- Medium6.5A path traversal vulnerability in /ftl/web/setup.cgi in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote authenticat…Check if you run itEPSS 0.42%Mar 19, 2026
- Critical9.8Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 all…Check if you run itEPSS 0.54%Mar 19, 2026
Sort