Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposing crash infoCheck if you run itEPSS 0.18%Dec 10, 2025
- Critical9.3A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL.Check if you run itEPSS 0.78%Dec 10, 2025
- Medium4.3Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploading artifactCheck if you run itEPSS 0.34%Dec 10, 2025
- Medium4.3Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permissionCheck if you run itEPSS 0.23%Dec 10, 2025
- High8.0Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting the job confiCheck if you run itEPSS 0.31%Dec 10, 2025
- Medium5.0Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plCheck if you run itEPSS 0.21%Dec 10, 2025
- Low3.5A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.Check if you run itEPSS 0.19%Dec 10, 2025
- Medium4.3Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to obserCheck if you run itEPSS 0.16%Dec 10, 2025
- Medium4.3Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by usersCheck if you run itEPSS 0.18%Dec 10, 2025
- Medium4.3A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.Check if you run itEPSS 0.25%Dec 10, 2025
- High7.5Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackeCheck if you run itEPSS 0.56%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.20%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.17%Dec 10, 2025
- High7.01Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel).Check if you run itEPSS 0.16%Dec 10, 2025
- High8.7Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a methoCheck if you run itEPSS 0.75%Dec 10, 2025
- Critical10.0Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserializatioCheck if you run itEPSS 0.71%Dec 10, 2025
- Critical10.0Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to iCheck if you run itEPSS 0.71%Dec 10, 2025
- Critical10.0Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded byCheck this weekEPSS 24.72%Dec 10, 2025
- Medium4.3Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd.Check if you run itEPSS 0.22%Dec 10, 2025
Sort