Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 7.50%Aug 13, 2025
- High7.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 2.14%Aug 13, 2025
- High8.8Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinCheck this weekEPSS 84.00%Aug 13, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attacker to execute arbitrary code via a crafteCheck this weekEPSS 40.00%Aug 13, 2025
- High7.1Hydra is a continuous integration service for Nix based projects.Check this weekEPSS 20.00%Aug 12, 2025
- Medium4.8A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3).Check this weekEPSS 12.00%Aug 12, 2025
- Medium6.1A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 = V13.2 = V13.2 < V2506).Check if you run itEPSS 0.12%Aug 12, 2025
- Medium5.9A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 = V13.2 = V13.2 < V2506).Check if you run itEPSS 0.08%Aug 12, 2025
- Low2.0A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 = V13.2 = V13.2 < V2506).Check if you run itEPSS 0.12%Aug 12, 2025
- High7.5A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 = V13.2 = V13.2 < V2506).Check if you run itEPSS 0.18%Aug 12, 2025
- Medium6.1SAP NetWeaver Application Server ABAP (BIC Document) allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a maliciousCheck this weekEPSS 26.00%Aug 12, 2025
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible.Check this weekEPSS 23.00%Aug 12, 2025
- Medium6.1SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability.Check this weekEPSS 23.00%Aug 12, 2025
- High8.0Cherry Studio is a desktop client that supports for multiple LLM providers.Check this weekEPSS 77.00%Aug 11, 2025
- High8.7A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801.Check if you run itEPSS 1.05%Aug 11, 2025
- Medium5.3A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0.Check if you run itEPSS 1.05%Aug 10, 2025
- Low3.0In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface.Check this weekEPSS 29.00%Aug 10, 2025
- Medium4.2The Assemblyline 4 Service Client interfaces with the API to fetch tasks and publish the result for a service in Assemblyline 4.Check this weekEPSS 58.00%Aug 9, 2025
- Medium5.2Craft is a platform for creating digital experiences.Check this weekEPSS 50.00%Aug 9, 2025
- Critical9.3A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface.Check if you run itEPSS 0.41%Aug 8, 2025
- Medium6.9A vulnerability was identified in the XPC services of Fantastical.Check this weekEPSS 39.00%Aug 7, 2025
- Low2.3Let's Encrypt client and ACME library written in Go (Lego).Check this weekEPSS 22.00%Aug 7, 2025
- Medium6.9Thinbus Javascript Secure Remote Password is a browser SRP6a implementation for zero-knowledge password authentication.Check this weekEPSS 39.00%Aug 7, 2025
- Medium6.4In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js.Check this weekEPSS 25.00%Aug 7, 2025
- Medium6.4In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js.Check this weekEPSS 25.00%Aug 7, 2025