Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings.Check if you run itEPSS 0.25%Jan 20, 2026
- Medium5.8A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when is enabled.Check if you run itEPSS 0.87%Jan 20, 2026
- Medium5.9We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when is enabled.Check if you run itEPSS 0.68%Jan 20, 2026
- High7.5A malformed frame with oversized, invalid data can cause Node.js to crash by triggering an unhandled error .Check if you run itEPSS 3.96%Jan 20, 2026
- Low2.8A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via even when the process has only read permissions.Check if you run itEPSS 0.26%Jan 20, 2026
- High7.1A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the module with the timeout option.Check if you run itEPSS 3.45%Jan 20, 2026
- High7.1A flaw in Node.js’s Permissions model allows attackers to bypass and restrictions using crafted relative symlink paths.Check if you run itEPSS 1.70%Jan 20, 2026
- Medium6.5Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unsetCheck if you run itEPSS 0.46%Jan 20, 2026
- Medium6.5A code injection vulnerability in the binary-parser library prior to version 2.3.0 allows arbitrary JavaScript code execution when untrusted values are used in parser field names oCheck if you run itEPSS 0.56%Jan 20, 2026
- Medium6.7NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploitinCheck if you run itEPSS 0.19%Jan 20, 2026
- High7.3NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installCheck if you run itEPSS 1.36%Jan 20, 2026
- High7.3NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the same privileges as the NVIDIA Nsight VisualCheck if you run itEPSS 0.19%Jan 20, 2026
- High7.3NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_Check if you run itEPSS 1.36%Jan 20, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityPatch nowKEVEPSS 73.19%Jan 20, 2026
- High8.8IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.Check if you run itEPSS 0.31%Jan 20, 2026
- High8.4IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019 IBM® Sterling Connect:Direct for UNIX contains hCheck if you run itEPSS 0.11%Jan 20, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.Check if you run itEPSS 0.28%Jan 20, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.Check if you run itEPSS 0.28%Jan 20, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.Check if you run itEPSS 0.28%Jan 20, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.Check if you run itEPSS 0.28%Jan 20, 2026
- Medium4.3The NotificationX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'regenerate' and 'reset' REST API endpoints in alCheck if you run itEPSS 0.32%Jan 20, 2026
- High8.8The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to aCheck if you run itEPSS 0.32%Jan 20, 2026
- Medium6.4The FlatPM – Ad Manager, AdSense and Custom Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rank_math_description' custom field in all versions up tCheck if you run itEPSS 0.24%Jan 20, 2026
- Medium5.4The The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'start_migration', 'cancel_migration', and 'revert_migratCheck if you run itEPSS 0.22%Jan 20, 2026
- High8.1The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.6 via deserialization of untruCheck if you run itEPSS 0.57%Jan 20, 2026
Sort