Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026
- High8.6CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.49%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.43%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.43%Oct 13, 2026
- High7.5Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicio…Check if you run itEPSS 0.45%Oct 13, 2026
- High7.6OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldCheck if you run itEPSS 0.22%Oct 13, 2026
- Medium5.8Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.Check if you run itEPSS 0.09%Oct 13, 2026
- Medium6.8Out-of-bounds write vulnerability in Citrix Workspace app for Windows.Check if you run itEPSS 0.11%Oct 13, 2026
- High7.5Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication.Check if you run itEPSS 0.34%Oct 13, 2026
- High7.5Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication.Check if you run itEPSS 0.52%Oct 13, 2026
- Low3.7Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.8An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp.Check if you run itEPSS 0.14%Oct 13, 2026
- High8.7MediaAgent contained a heap-based buffer overflow issue affecting service availability.Check if you run itEPSS 0.32%Oct 13, 2026
- Critical9.3CVFS contained an input validation issue affecting command execution.Check if you run itEPSS 0.39%Oct 13, 2026
- High7.7CVFS contained a missing authentication condition affecting command execution.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained a null pointer dereference affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained an out-of-bounds write affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained an integer overflow affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High8.7CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure.Check if you run itEPSS 0.33%Oct 13, 2026
- Low3.5The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libra…Check if you run itEPSS 0.14%Oct 13, 2026
- Medium5.4openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers.Check if you run itEPSS 0.15%Oct 13, 2026
- High8.6Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy.Check if you run itEPSS 0.19%Oct 13, 2026
- Low3.1H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file .Check if you run itEPSS 0.10%Oct 13, 2026
- High7.1HyperScale contained a path traversal issue affecting information disclosure.Check if you run itEPSS 0.38%Oct 13, 2026