Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Masa CMS is an open source Enterprise Content Management platform.Check if you run itEPSS 0.25%Dec 12, 2025
- Medium4.9The WatchTowerHQ plugin for WordPress is vulnerable to arbitrary file read via the 'wht_download_big_object_origin' parameter in all versions up to, and including, 3.16.0.Check if you run itEPSS 0.51%Dec 12, 2025
- Medium4.9An issue was discovered in Weaviate OSS before 1.33.4.Check if you run itEPSS 0.50%Dec 12, 2025
- High7.2An issue was discovered in Weaviate OSS before 1.33.4.Check if you run itEPSS 0.91%Dec 12, 2025
- Medium4.6jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.Check if you run itEPSS 0.17%Dec 12, 2025
- Medium4.6RuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu/edit endpoint.Check if you run itEPSS 0.18%Dec 12, 2025
- Medium4.6jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability.Check if you run itEPSS 0.17%Dec 12, 2025
- Critical9.1Plesk 18.0 has Incorrect Access Control.Check if you run itEPSS 0.55%Dec 12, 2025
- Critical9.8Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.Check if you run itEPSS 0.50%Dec 12, 2025
- High8.8An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.Check if you run itEPSS 0.30%Dec 12, 2025
- Medium4.3Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/preview endpoint.Check if you run itEPSS 0.27%Dec 12, 2025
- High8.8Apple Multiple Products Use-After-Free WebKit VulnerabilityPatch nowKEVEPSS 25.65%Dec 12, 2025
- High7.1Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityPatch nowKEVEPSS 53.30%Dec 12, 2025
- High8.8Google Chromium Out of Bounds Memory Access VulnerabilityPatch nowKEVEPSS 55.33%Dec 12, 2025
- Medium6.9AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges.Check if you run itEPSS 0.43%Dec 11, 2025
- Critical9.9Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check if you run itEPSS 0.72%Dec 11, 2025
- Medium5.3quic-go is an implementation of the QUIC protocol in Go.Check if you run itEPSS 0.92%Dec 11, 2025
- Low1.0Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in obserCheck if you run itEPSS 0.15%Dec 11, 2025
- Medium6.9D-Link dir-803_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.99%Dec 11, 2025
- Medium5.3A vulnerability was identified in PowerJob up to 5.1.2.Check if you run itEPSS 0.35%Dec 11, 2025
- High8.0GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have, under certain circumstanCheck if you run itEPSS 0.53%Dec 11, 2025
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated uCheck if you run itEPSS 0.27%Dec 11, 2025
- Medium6.5A flaw was found in glib.Check if you run itEPSS 0.58%Dec 11, 2025
- High8.5squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticatedCheck if you run itEPSS 0.30%Dec 11, 2025
Sort