Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Ruoyi v4.8.0 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.33%Nov 26, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityPatch nowKEVEPSS 60.15%Nov 26, 2025
- Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityPatch nowKEVEPSS 61.17%Nov 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete There is a BUG: KASAN: stack-out-of-bounds inCheck if you run itEPSS 0.19%Nov 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpi_video_switch_brightness() The switch_brightness_work delayed work accessCheck if you run itEPSS 0.21%Nov 21, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leavesCheck if you run itEPSS 0.36%Nov 21, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation When btrfs_add_qgroup_relation() is called wiCheck if you run itEPSS 0.20%Nov 21, 2025
- High7.5SonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 0.91%Nov 20, 2025
- High7.87-Zip 7-Zip Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 27.39%Nov 19, 2025
- Critical9.3lynxtechnology twonky_server Unprotected Alternate ChannelPatch nowKEVEPSS 31.18%Nov 19, 2025
- High7.1astro astro Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)Patch nowKEVEPSS 0.53%Nov 19, 2025
- High7.8A Use-After-Free vulnerability has been discovered in GRUB's gettext module.Check if you run itEPSS 0.22%Nov 18, 2025
- Medium6.0An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0Check if you run itEPSS 0.18%Nov 18, 2025
- High7.7Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO.S Setting ApplicatioCheck if you run itEPSS 0.15%Nov 18, 2025
- Medium5.4Stack-based buffer overflow in the SMASH-CLP shell.Check if you run itEPSS 0.29%Nov 18, 2025
- Medium5.4The Post Type Switcher plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.0 due to missing validation on a user controlledCheck if you run itEPSS 0.31%Nov 18, 2025
- Low2.4Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack againstCheck if you run itEPSS 0.17%Nov 18, 2025
- Medium5.7Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise interCheck if you run itEPSS 0.16%Nov 18, 2025
- Medium5.7Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further sCheck if you run itEPSS 0.16%Nov 18, 2025
- High8.8A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attackerCheck if you run itEPSS 1.05%Nov 18, 2025
- High7.5An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑sCheck if you run itEPSS 0.34%Nov 18, 2025
- Medium5.3A vulnerability was determined in itsourcecode Student Information System 1.0.Check if you run itEPSS 0.34%Nov 18, 2025
- Medium6.9A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0.Check if you run itEPSS 0.48%Nov 18, 2025
- High7.2Fortinet FortiWeb OS Command Injection VulnerabilityPatch nowKEVEPSS 54.72%Nov 18, 2025
- Medium5.3A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5.Check if you run itEPSS 8.25%Nov 17, 2025
Sort