Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privileges.Check if you run itEPSS 0.12%Dec 10, 2025
- Low3.5Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Information Services Internal and External Trade Inc.Check if you run itEPSS 0.20%Dec 10, 2025
- Critical9.3Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory (LDAP) login method.Check if you run itEPSS 0.57%Dec 10, 2025
- High8.8A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges.Check if you run itEPSS 0.17%Dec 10, 2025
- High8.2Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.Check if you run itEPSS 0.59%Dec 10, 2025
- High8.8The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4.Check if you run itEPSS 0.45%Dec 10, 2025
- Medium5.1A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.Check if you run itEPSS 0.15%Dec 10, 2025
- Low2.7A flaw was found in Keycloak Admin REST (Representational State Transfer) API.Check if you run itEPSS 0.35%Dec 10, 2025
- High7.1Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc.Check if you run itEPSS 0.21%Dec 10, 2025
- Critical9.8A flaw was found in GLib (Gnome Lib).Check if you run itEPSS 0.83%Dec 10, 2025
- Medium6.3An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in the MXsecuritCheck if you run itEPSS 0.46%Dec 10, 2025
- Critical9.3Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculaCheck if you run itEPSS 0.18%Dec 10, 2025
- Critical9.3Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UICheck if you run itEPSS 0.18%Dec 10, 2025
- High8.7A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX.Check if you run itEPSS 0.37%Dec 10, 2025
- Medium5.3Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.Check if you run itEPSS 0.21%Dec 10, 2025
- Medium4.9The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2.Check if you run itEPSS 0.52%Dec 10, 2025
- Critical9.8The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2.Check if you run itEPSS 0.48%Dec 10, 2025
- High8.1Filament is a collection of full-stack components for accelerated Laravel development.Check if you run itEPSS 0.34%Dec 10, 2025
- Critical9.8PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation.Check if you run itEPSS 1.81%Dec 10, 2025
- Medium5.3mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies.Check if you run itEPSS 0.24%Dec 10, 2025
- High8.7Gogs Path Traversal VulnerabilityPatch nowKEVEPSS 85.20%Dec 10, 2025
- Medium6.1Taguette is an open source qualitative research tool.Check if you run itEPSS 0.26%Dec 9, 2025
- Critical9.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.51%Dec 9, 2025
- Low3.7Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.22%Dec 9, 2025
- Medium6.6The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container.Check if you run itEPSS 0.14%Dec 9, 2025
Sort