Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.34%Mar 10, 2026
- High8.8Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.10%Mar 10, 2026
- High7.2The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf(8) unmodified.Check if you run itEPSS 6.38%Mar 9, 2026
- Critical9.8Improper Input Validation vulnerability in Apache IoTDB.Check if you run itEPSS 0.67%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.23%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.23%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In modem, there is a possible improper input validation.Check if you run itEPSS 0.57%Mar 9, 2026
- High8.8A security issue was discovered in ingress-nginx where the Ingress annotation can be used to inject configuration into nginx.Check if you run itEPSS 0.74%Mar 9, 2026
- Medium6.5Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment.Check if you run itEPSS 0.25%Mar 6, 2026
- Critical9.2TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Check if you run itEPSS 0.58%Mar 6, 2026
- Critical10.0NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module.Check if you run itEPSS 0.77%Mar 5, 2026
- Medium6.9A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3.Check if you run itEPSS 0.23%Mar 5, 2026
- Medium6.5The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs.Check if you run itEPSS 0.16%Mar 5, 2026
- Medium4.8Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one.Check if you run itEPSS 0.25%Mar 4, 2026
- Critical9.6Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.34%Mar 4, 2026
- Medium5.7A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an…Check if you run itEPSS 0.26%Mar 4, 2026
- High8.2SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers.Check if you run itEPSS 0.38%Mar 4, 2026
- Critical9.8Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a spec…Check if you run itEPSS 0.65%Mar 3, 2026
- Critical9.8Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier all…Check if you run itEPSS 0.50%Mar 3, 2026
- Critical9.8A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attackers to execute arbitrary…Check if you run itEPSS 1.70%Mar 3, 2026