Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requCheck if you run itEPSS 0.33%Dec 3, 2025
- Medium6.2A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS.Check if you run itEPSS 0.19%Dec 3, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Medium6.2A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS.Check if you run itEPSS 0.21%Dec 3, 2025
- High7.8The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escCheck if you run itEPSS 0.15%Dec 3, 2025
- Critical10.0wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication AlgorithmPatch nowKEVEPSS 4.55%Dec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025
- Medium5.3Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which blocks the backing event loop and unconditCheck if you run itEPSS 0.29%Dec 2, 2025
- High7.8Vim is an open source, command line text editor.Check if you run itEPSS 0.45%Dec 2, 2025
- Critical9.3A vulnerability in Longwatch devices allows unauthenticated HTTP GET requests to execute arbitrary code via an exposed endpoint, due to the absence of code signing and execution coCheck if you run itEPSS 0.68%Dec 2, 2025
- Critical9.3The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critiCheck if you run itEPSS 0.62%Dec 2, 2025
- Critical9.8The DesignThemes LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.37%Dec 2, 2025
- High7.5crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificateCheck if you run itEPSS 0.46%Dec 2, 2025
- Medium6.4A container privilege escalation flaw was found in certain CodeReady Workspaces images.Check if you run itEPSS 0.18%Dec 2, 2025
- High7.7The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components.Check if you run itEPSS 0.28%Dec 2, 2025
- High8.5JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM during agent uninstall orCheck if you run itEPSS 0.19%Dec 2, 2025
- Medium6.5Arcade MCP allows you to to create, deploy, and share MCP Servers.Check if you run itEPSS 0.31%Dec 2, 2025
- High7.6The MCP Python SDK, called on PyPI, is a Python implementation of the Model Context Protocol (MCP).Check if you run itEPSS 0.51%Dec 2, 2025
- High7.6MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.51%Dec 2, 2025
- Low2.7ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check if you run itEPSS 0.63%Dec 2, 2025
- Medium5.4The BigFix SaaS's HTTP responses were missing some security headers.Check if you run itEPSS 0.18%Dec 2, 2025
- High7.4Cacti is an open source performance and fault management framework.Check this weekEPSS 10.81%Dec 2, 2025
- Medium5.3Apptainer is an open source container platform.Check if you run itEPSS 0.23%Dec 2, 2025
- Medium4.5SingularityCE and SingularityPRO are open source container platforms.Check if you run itEPSS 0.16%Dec 2, 2025
- Critical9.0SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based upCheck if you run itEPSS 0.25%Dec 2, 2025
Sort