Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- High8.8A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambCheck if you run itEPSS 0.91%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theCheck if you run itEPSS 0.15%May 7, 2025
- Medium5.5A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local fCheck if you run itEPSS 0.17%May 7, 2025
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- Medium5.4Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: fromCheck if you run itEPSS 0.37%May 7, 2025
- Medium4.5dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.Check if you run itEPSS 0.59%May 7, 2025
- Medium6.1Wagtail CMS 6.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) in the document upload functionality.Check if you run itEPSS 0.31%May 7, 2025
- Critical9.4goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.74%May 6, 2025
- Medium6.5Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP output was not being perfCheck if you run itEPSS 0.18%May 6, 2025
- High8.0The identity infrastructure software ZITADEL offers developers the ability to manage user sessions using the Session API.Check if you run itEPSS 0.46%May 6, 2025
- High8.0vLLM is an inference and serving engine for large language models.Check if you run itEPSS 0.56%May 6, 2025
- Medium6.0The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid.Check if you run itEPSS 0.13%May 6, 2025
- Low3.4FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts.Check if you run itEPSS 0.34%May 6, 2025
- High7.1Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code.Check if you run itEPSS 1.59%May 6, 2025
- Medium4.3The AHAthat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.Check if you run itEPSS 0.15%May 6, 2025
- High7.5cpp-httplib is a C++ header-only HTTP/HTTPS server and client library.Check if you run itEPSS 0.66%May 6, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck if you run itEPSS 0.39%May 5, 2025
- High7.2Misskey is an open source, federated social media platform.Check if you run itEPSS 0.25%May 5, 2025
- High8.9Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS.Check if you run itEPSS 2.25%May 5, 2025
- Medium6.4The Multiple File Upload add-on component 3.1.0 for OutSystems is vulnerable to Unrestricted File Upload.Check if you run itEPSS 0.34%May 5, 2025
- Medium6.5NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.Check if you run itEPSS 1.18%May 5, 2025
- Medium6.5NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.Check if you run itEPSS 1.18%May 5, 2025