Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9A weakness has been identified in Tenda WH450 1.0.0.18.Check if you run itEPSS 0.97%Dec 22, 2025
- Medium5.5A vulnerability has been found in SeaCMS up to 13.3.Check if you run itEPSS 0.45%Dec 21, 2025
- High7.4A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155).Check if you run itEPSS 0.75%Dec 21, 2025
- High8.8n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityPatch nowKEVEPSS 98.99%Dec 19, 2025
- Low3.8Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.Check if you run itEPSS 0.25%Dec 19, 2025
- High8.7MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityPatch nowKEVEPSS 83.22%Dec 19, 2025
- Medium6.9Cowrie Unrestricted wget/curl Emulation SSRF-Based DDoS AmplificationPatch nowKEVEPSS 0.68%Dec 19, 2025
- Medium5.5Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.Check if you run itEPSS 0.22%Dec 18, 2025
- High8.5Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library.Check if you run itEPSS 0.22%Dec 18, 2025
- High7.5langgenius dify Improper Access ControlPatch nowKEVEPSS 29.93%Dec 18, 2025
- Critical9.3WatchGuard Firebox Out of Bounds Write VulnerabilityPatch nowKEVEPSS 29.42%Dec 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: imm: Fix use-after-free bug caused by unfinished delayed work The delayed work item 'imm_tq' is initializeCheck if you run itEPSS 0.22%Dec 18, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects SuCheck if you run itEPSS 0.22%Dec 18, 2025
- High7.5DO NOT USE THIS CVE RECORD.Check this weekEPSS 55.00%Dec 18, 2025
- High7.1Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files.Check if you run itEPSS 0.81%Dec 17, 2025
- High7.2RoundCube Webmail Cross-site Scripting VulnerabilityPatch nowKEVEPSS 27.41%Dec 17, 2025
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityPatch nowKEVEPSS 32.39%Dec 17, 2025
- Critical9.3ASUS Live Update Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.20%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire su_mutex before navigating configs hierarchy There is a race between operations that iterateCheck if you run itEPSS 0.21%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL The AXI crossbar of TH1520 has no proper timeout haCheck if you run itEPSS 0.21%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests coming from the same conteCheck if you run itEPSS 0.14%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error return value is set to tCheck if you run itEPSS 0.17%Dec 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer.ino and footer.nid is tCheck if you run itEPSS 0.43%Dec 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure last_fence is always updated Update last_fence in the vm-bind path instead of kernel managedCheck if you run itEPSS 0.13%Dec 16, 2025
Sort