Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.3Frappe Learning is a learning system that helps users structure their content.Open the advisoryNov 12, 2025
- Low3.5In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a…Open the advisoryNov 12, 2025
- Medium4.3The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorizati…Open the advisoryNov 12, 2025
- High7.5Vite Vitejs Improper Access Control VulnerabilityPatch nowKEVEPSS 65.19%Mar 31, 2025
- High8.6Check Point Quantum Security Gateways Information Disclosure VulnerabilityPatch nowKEVEPSS 99.98%May 27, 2024
- High7.5ownCloud graphapi Information Disclosure VulnerabilityPatch nowKEVEPSS 78.43%Nov 21, 2023
- Medium5.5Android Pixel Information Disclosure VulnerabilityPatch nowKEVEPSS 0.27%Jun 13, 2023
- High7.5MinIO Information Disclosure VulnerabilityPatch nowKEVEPSS 83.96%Mar 22, 2023
- Critical9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback ( ) to ask for data to send, even when the option has been set, if the same handle previo…Check if you run itEPSS 5.09%Dec 5, 2022
- Critical9.8CVE-2020-35167 is listed by Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Ti…Check if you run itEPSS 1.02%Jul 11, 2022
- High7.5An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a differe…Check if you run itEPSS 3.34%Jun 2, 2022
- Medium6.5Cisco IOS XR Open Port VulnerabilityPatch nowKEVEPSS 11.47%May 20, 2022
- High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.18%Nov 17, 2021
- Medium5.3curl supports the command line option, known as in libcurl.Check if you run itEPSS 5.37%Aug 5, 2021
- Low3.1curl 7.7 through 7.76.1 suffers from an information disclosure when the command line option, known as in libcurl, is used to send variable=content pairs to TELNET serv…Check if you run itEPSS 4.51%Jun 11, 2021
- Medium5.7There's a flaw in Python 3's pydoc.Check if you run itEPSS 1.88%May 20, 2021
- Medium5.3curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.Check if you run itEPSS 5.30%Apr 1, 2021
- High7.5When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and…Check this weekEPSS 18.11%Mar 1, 2021
- Low3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make cu…Check if you run itEPSS 3.90%Dec 14, 2020
- High7.5curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).Check if you run itEPSS 3.93%Dec 14, 2020
- Medium5.5Samsung Mobile Devices Improper Access Control VulnerabilityPatch nowKEVEPSS 1.08%Dec 10, 2020
- High7.5Cisco ASA and FTD Information Disclosure VulnerabilityPatch nowKEVEPSS 71.79%May 6, 2020
- Medium5.3GNU Libc current is affected by: Mitigation bypass.Check if you run itEPSS 3.22%Jul 15, 2019
- Medium6.5Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkh…Check if you run itEPSS 1.53%Jul 3, 2019
- Low3.3Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (…Check if you run itEPSS 0.34%Mar 14, 2019