Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3liquidfiles liquidfiles Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.77%Sep 30, 2025
- Medium4.8The Postie WordPress plugin before 1.9.71 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cro…Check if you run itEPSS 0.18%Sep 29, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityPatch nowKEVEPSS 8.63%Sep 29, 2025
- Medium5.3A vulnerability was identified in YunaiV ruoyi-vue-pro up to 2025.09.Check if you run itEPSS 0.31%Sep 26, 2025
- Medium5.3A vulnerability was determined in YunaiV yudao-cloud up to 2025.09.Check if you run itEPSS 0.31%Sep 26, 2025
- Low2.4Monkeytype is a minimalistic and customizable typing test.Check if you run itEPSS 0.25%Sep 25, 2025
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.57%Sep 25, 2025
- High8.6Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityPatch nowKEVEPSS 87.09%Sep 25, 2025
- Critical9.9Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityPatch nowKEVEPSS 71.21%Sep 25, 2025
- High7.3TOTOLINK x6000r_firmware Improper Input ValidationPatch nowKEVEPSS 0.85%Sep 24, 2025
- High7.7Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityPatch nowKEVEPSS 41.50%Sep 24, 2025
- Medium6.9Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.Check if you run itEPSS 0.33%Sep 23, 2025
- Medium6.3Http4s is a Scala interface for HTTP services.Check if you run itEPSS 0.37%Sep 23, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows Stored XSS.Check if you run itEPSS 0.22%Sep 23, 2025
- Medium4.3Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.27%Sep 23, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to ceph_connection_v1_info There is a place where generic code in messenger.c is rCheck if you run itEPSS 0.33%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ceph: always call ceph_shift_unused_folios_left() The function ceph_process_folio_batch() sets folio_batch entriCheck if you run itEPSS 0.19%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash after fscrypt_encrypt_pagecache_blocks() error The function move_dirty_folio_in_page_array() wasCheck if you run itEPSS 0.19%Sep 23, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The call to idxd_free() introduces a duplicate put_device() leading tCheck if you run itEPSS 0.15%Sep 23, 2025
- High7.0A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package.Check if you run itEPSS 0.22%Sep 23, 2025
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 90.12%Sep 22, 2025
- Medium6.9A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery (SSRF).Check if you run itEPSS 0.38%Sep 22, 2025
- Medium5.3Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata.Check if you run itEPSS 0.22%Sep 22, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in publitio Publitio publitio allows Server Side Request Forgery.This issue affects Publitio: from n/a through <= 2.2.1.Check if you run itEPSS 0.22%Sep 22, 2025
- Medium5.5Authorization Bypass Through User-Controlled Key vulnerability in Kodezen LLC Academy LMS academy allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.36%Sep 22, 2025
Sort