Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64Check if you run itEPSS 0.23%Oct 15, 2026
- High7.1An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizCheck if you run itEPSS 0.09%Oct 15, 2026
- Medium5.1"Handmade Marketplace App - Creema" provided by CREEMA LTD.Check if you run itEPSS 0.21%Oct 15, 2026
- Critical9.2An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizCheck if you run itEPSS 0.29%Oct 15, 2026
- Medium6.9JVN#94004488: Smartphone application "Vehicle Inspection Certificate Viewer" vulnerable to sensitive information disclosureCheck if you run itEPSS 0.15%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in b…Check if you run itEPSS 0.32%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound Q…Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.4"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium5.1JVN#40460777: Multiple vulnerabilities in "ゲオアプリ"Check if you run itEPSS 0.10%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison l…Check if you run itEPSS 0.40%Oct 15, 2026
- High8.0Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksCheck if you run itEPSS 0.33%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads int…Check if you run itEPSS 0.32%Oct 15, 2026
- High8.5Rancher users who can create Projects can gain access to arbitrary projectsCheck if you run itEPSS 0.43%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field f…Check if you run itEPSS 0.32%Oct 15, 2026
- Medium6.3Fleet doesn’t validate a server’s certificate when connecting through SSHCheck if you run itEPSS 0.19%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array fo…Check if you run itEPSS 0.26%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecod…Check if you run itEPSS 0.28%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Check if you run itEPSS 0.28%Oct 15, 2026
- Critical9.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handli…Check if you run itEPSS 0.42%Oct 15, 2026
- Medium4.3The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4.Check if you run itEPSS 0.25%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length d…Check if you run itEPSS 0.21%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered byte…Check if you run itEPSS 0.26%Oct 15, 2026
- High8.7Allocation of Resources Without Limits or ThrottlingCheck if you run itEPSS 0.26%Oct 15, 2026
- High7.0The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync.Check if you run itEPSS 0.12%Oct 15, 2026
- High7.0The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream.Check if you run itEPSS 0.12%Oct 15, 2026