Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account to escalate privileges via role assumption.Check if you run itEPSS 0.52%Dec 15, 2025
- Medium6.9In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL (0x00) characters duCheck if you run itEPSS 0.30%Dec 15, 2025
- Critical9.0In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.Check if you run itEPSS 0.33%Dec 15, 2025
- Medium4.7An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.29%Dec 15, 2025
- Critical9.1In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows undefined PHPCheck if you run itEPSS 0.29%Dec 15, 2025
- Medium5.4grav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS) vulnerability in the page editing functionality.Check if you run itEPSS 0.16%Dec 15, 2025
- Critical9.8An issue was discovered in Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.38%Dec 15, 2025
- Critical9.8An issue was discovered in Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.38%Dec 15, 2025
- Critical9.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.Check if you run itEPSS 0.50%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.60%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.34%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.34%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.59%Dec 15, 2025
- Medium6.2The Cordova plugin cordova-plugin-x-socialsharing (SocialSharing-PhoneGap-Plugin) for Android 6.0.4, registers an exported broadcast receiver nl.xservices.plugins.ShareChooserPendiCheck if you run itEPSS 0.28%Dec 15, 2025
- Medium6.5An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Check if you run itEPSS 0.26%Dec 15, 2025
- High8.2An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Check if you run itEPSS 0.34%Dec 15, 2025
- High8.8An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Check if you run itEPSS 0.34%Dec 15, 2025
- High7.5An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Check if you run itEPSS 0.31%Dec 15, 2025
- High8.1An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Check if you run itEPSS 0.38%Dec 15, 2025
- Medium5.4An issue was discovered in allauth-django before 65.13.0.Check if you run itEPSS 0.16%Dec 15, 2025
- Medium5.4An issue was discovered in allauth-django before 65.13.0.Check if you run itEPSS 0.17%Dec 15, 2025
- Critical9.8MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool.Check if you run itEPSS 0.74%Dec 15, 2025
- High7.5An issue was discovered in Dynatrace OneAgent before 1.325.47.Check if you run itEPSS 0.43%Dec 15, 2025
- Medium6.5TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.Check if you run itEPSS 1.10%Dec 15, 2025
- Critical9.1TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control.Check if you run itEPSS 0.34%Dec 15, 2025
Sort