Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git trCheck if you run itEPSS 0.84%May 21, 2025
- High8.4An issue in Valvesoftware Steam Client Steam Client 1738026274 allows attackers to escalate privileges via a crafted executable or DLL.Check if you run itEPSS 0.21%May 21, 2025
- High7.7itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to the database.Check if you run itEPSS 0.16%May 21, 2025
- Medium5.5The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for their servers configured in the client.Check if you run itEPSS 0.16%May 21, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.Check this weekEPSS 56.00%May 20, 2025
- High7.1A vulnerability has been found in H3C Magic R200G up to 100R002 and classified as problematic.Check this weekEPSS 56.00%May 20, 2025
- Medium5.3Hubble is a fully distributed networking and security observability platform for cloud native workloads.Check this weekEPSS 29.00%May 20, 2025
- High7.1A vulnerability, which was classified as problematic, was found in H3C R2+ProG up to 200R004.Check this weekEPSS 56.00%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck condition The pds_core's adminq is protected by the adminq_lockCheck if you run itEPSS 0.19%May 20, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server.Check if you run itEPSS 0.38%May 20, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lease breaks A pre-existing valid cfid returned from find_or_creCheck if you run itEPSS 0.37%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pds_core: remove write-after-free of client_id A use-after-free error popped up in stress testing: [Mon Apr 21 2Check if you run itEPSS 0.23%May 20, 2025
- Medium6.5IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client.Check if you run itEPSS 0.25%May 20, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.Check this weekEPSS 52.00%May 19, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0.Check this weekEPSS 53.00%May 19, 2025
- Medium6.9A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0.Check this weekEPSS 56.00%May 19, 2025
- High8.7A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.Check this weekEPSS 85.00%May 17, 2025
- Medium6.1The Audio Comments Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.14%May 17, 2025
- Medium4.3A denial-of-service vulnerability has been identified in the libsoup HTTP client library.Check if you run itEPSS 0.40%May 16, 2025
- Medium5.0Nextcloud Desktop is the desktop sync client for Nextcloud.Check this weekEPSS 18.00%May 16, 2025
- Medium5.3This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.Check if you run itEPSS 0.38%May 15, 2025
- Medium4.8The ClickSold IDX WordPress plugin through 1.90 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiteCheck if you run itEPSS 0.36%May 15, 2025
- Medium6.1wp-buy wp_content_copy_protection_\&_no_right_click URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.53%May 15, 2025
- High7.2The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "cli_path" parameter.Check if you run itEPSS 2.35%May 15, 2025
- Medium6.1The ClipArt WordPress plugin through 0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could beCheck if you run itEPSS 0.34%May 15, 2025