Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authentCheck if you run itEPSS 0.52%Dec 11, 2025
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 13.2 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated userCheck if you run itEPSS 0.24%Dec 11, 2025
- Medium6.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated uCheck if you run itEPSS 0.39%Dec 11, 2025
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an unauthenticateCheck if you run itEPSS 0.86%Dec 11, 2025
- High8.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that, under certain conditions could haveCheck if you run itEPSS 0.42%Dec 11, 2025
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated uCheck if you run itEPSS 0.30%Dec 11, 2025
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 6.3 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated usCheck if you run itEPSS 0.31%Dec 11, 2025
- Medium5.3ZITADEL is an open-source identity infrastructure tool.Check if you run itEPSS 0.22%Dec 11, 2025
- High8.7Form.io is a combined Form and API platform for Serverless applications.Check if you run itEPSS 0.31%Dec 11, 2025
- Medium5.7The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.26%Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Check if you run itEPSS 0.56%Dec 11, 2025
- High8.8An issue was discovered in cPanel 110 through 132.Check if you run itEPSS 0.83%Dec 11, 2025
- Critical9.8An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file toCheck if you run itEPSS 0.54%Dec 11, 2025
- Critical9.1An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary codeCheck if you run itEPSS 0.57%Dec 11, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interCheck if you run itEPSS 0.21%Dec 11, 2025
- High8.8An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted PHPCheck if you run itEPSS 0.53%Dec 11, 2025
- Medium5.3Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers.Check if you run itEPSS 0.17%Dec 11, 2025
- High7.5Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG.Check if you run itEPSS 0.32%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the module_update inCheck if you run itEPSS 2.07%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in file /usr/lib/lCheck if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in file /usr/lib/lua/luCheck if you run itEPSS 3.14%Dec 11, 2025
- High7.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_geCheck if you run itEPSS 1.30%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleCheck if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_seCheck if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_seCheck if you run itEPSS 2.57%Dec 11, 2025
Sort