Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive valuesCheck if you run itEPSS 0.38%Oct 27, 2026
- High8.8Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during planCheck if you run itEPSS 0.47%Oct 27, 2026
- Critical9.9Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator.Check if you run itEPSS 0.46%Oct 26, 2026
- High8.4CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform HookCheck if you run itEPSS 0.88%Oct 22, 2026
- High7.8mise manages dev tools like node, python, cmake, and terraform.Check if you run itEPSS 0.26%Oct 14, 2026
- UnknownHCSEC-2026-23 - Multiple vulnerabilities impacting HashiCorp Terraform MCP ServerCheck if you run itEPSS 0.39%Jul 28, 2026
- UnknownHCSEC-2026-17 - Terraform Enterprise vulnerable to arbitrary file readCheck if you run itEPSS 0.44%Jul 6, 2026
- High7.8mise manages dev tools like node, python, cmake, and terraform.Check if you run itEPSS 0.17%Apr 7, 2026
- High7.7The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug…Check if you run itEPSS 0.52%Feb 26, 2026
- High8.5tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports.Check if you run itEPSS 0.34%Feb 25, 2026
- High8.7Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment.Check if you run itEPSS 0.48%Feb 4, 2026
- High7.4OpenOps before 0.6.11 allows remote code execution in the Terraform block.Check if you run itEPSS 0.23%Dec 24, 2025
- High7.4Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by default, potentially resulting in an insecure configuration.Check if you run itEPSS 0.53%Nov 21, 2025
- Medium4.3Terraform state versions can be created by a user with specific but insufficient permissions in a Terraform Enterprise workspace.Check if you run itEPSS 0.19%Nov 21, 2025
- Medium6.9Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks.Check if you run itEPSS 0.46%Sep 6, 2025
- High8.1Coder allows organizations to provision remote development environments via Terraform.Check if you run itEPSS 0.41%Sep 6, 2025
- Low1.1Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform.Check if you run itEPSS 0.56%May 6, 2025
- UnknownHCSEC-2023-19 - Terraform Enterprise, Docker Engine, and Go’s CVE-2023-24540Check if you run itEPSS 1.56%Jun 28, 2023
Sort
18 records