Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26.Check if you run itEPSS 0.56%Aug 7, 2025
- Medium5.4A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeting-join process in plCheck if you run itEPSS 0.10%Aug 6, 2025
- Medium4.7An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI.Check this weekEPSS 29.00%Aug 6, 2025
- High7.8Memory corruption while handling client exceptions, allowing unauthorized channel access.Check if you run itEPSS 0.08%Aug 6, 2025
- Medium5.7Permission control vulnerability in the distributed clipboard module.Check this weekEPSS 13.00%Aug 6, 2025
- Medium6.5Russh is a Rust SSH client & server library.Check this weekEPSS 40.00%Aug 5, 2025
- Medium6.1Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the CWE-79: Improper NeutrCheck if you run itEPSS 0.24%Aug 4, 2025
- Critical9.8The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses.Check this weekEPSS 57.00%Aug 4, 2025
- Medium6.5An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the utility.Check this weekEPSS 41.00%Aug 4, 2025
- Medium5.3Cursor is a code editor built for programming with AI.Check this weekEPSS 37.00%Aug 1, 2025
- Medium6.9webfinger.js is a TypeScript-based WebFinger client that runs in both browsers and Node.js environments.Check this weekEPSS 62.00%Aug 1, 2025
- Critical10.0ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/.Check if you run itEPSS 4.07%Jul 31, 2025
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.06%Jul 31, 2025
- High8.1Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux.Check this weekEPSS 36.00%Jul 29, 2025
- High8.4In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header.Check this weekEPSS 20.00%Jul 29, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchroCheck this weekEPSS 72.00%Jul 28, 2025
- Medium4.3The Memory Usage plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.98.Check this weekEPSS 19.00%Jul 27, 2025
- High8.4A client-side security misconfiguration vulnerability exists in OpenBlow whistleblowing platform across multiple versions and default deployments, due to the absence of critical HTCheck if you run itEPSS 0.18%Jul 25, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix potential null-ptr-deref in to_atmarpd().Check if you run itEPSS 0.18%Jul 25, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2_reconnect_server(), a dumCheck if you run itEPSS 0.38%Jul 25, 2025
- Medium4.1OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.Check this weekEPSS 21.00%Jul 25, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint.Check this weekEPSS 34.00%Jul 25, 2025
- Medium4.7A flaw was found in libssh, a library that implements the SSH protocol.Check this weekEPSS 24.00%Jul 24, 2025
- Medium6.1The Affiliate Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2.Check this weekEPSS 23.00%Jul 24, 2025
- Medium4.3The iThoughts Advanced Code Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.10.Check this weekEPSS 19.00%Jul 24, 2025