Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft runningCheck if you run itEPSS 0.60%Jan 10, 2026
- Medium4.7CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft runningCheck if you run itEPSS 0.34%Jan 10, 2026
- High8.2CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft runningCheck if you run itEPSS 0.45%Jan 10, 2026
- High7.3CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft runningCheck if you run itEPSS 0.28%Jan 10, 2026
- Critical9.3A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8.Check if you run itEPSS 6.91%Jan 9, 2026
- Critical9.8Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This iCheck if you run itEPSS 0.44%Jan 9, 2026
- Critical9.3A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8.Check if you run itEPSS 6.07%Jan 9, 2026
- High8.7A vulnerability has been found in Sangfor Operation and Maintenance Management System up to 3.0.8.Check if you run itEPSS 5.72%Jan 9, 2026
- Medium5.5A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.14%Jan 9, 2026
- Low3.5On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels.Check if you run itEPSS 0.22%Jan 9, 2026
- Medium6.5The issue was addressed with improved memory handling.Check if you run itEPSS 0.39%Jan 9, 2026
- Medium4.3A memory initialization issue was addressed with improved memory handling.Check if you run itEPSS 0.30%Jan 9, 2026
- Medium4.3A logic issue was addressed with improved validation.Check if you run itEPSS 0.21%Jan 9, 2026
- High8.4Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when openiCheck if you run itEPSS 1.44%Jan 9, 2026
- Medium6.9Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 (vpn modules) allows an authenticated adjacent attacker to delete arbitrary server file, leading to possible loCheck if you run itEPSS 0.30%Jan 9, 2026
- Medium5.3A vulnerability was determined in guchengwuyue yshopmall up to 1.9.1.Check if you run itEPSS 0.39%Jan 9, 2026
- Medium5.1A vulnerability was found in BiggiDroid Simple PHP CMS 1.0.Check if you run itEPSS 0.46%Jan 9, 2026
- Medium5.3A vulnerability has been found in RainyGao DocSys up to 2.02.37.Check if you run itEPSS 0.42%Jan 9, 2026
- Medium5.3A flaw has been found in RainyGao DocSys up to 2.02.36.Check if you run itEPSS 0.44%Jan 9, 2026
- High7.7GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality.Check if you run itEPSS 0.32%Jan 9, 2026
- Medium5.1GestSup versions prior to 3.2.60 contain a pre-authentication stored cross-site scripting (XSS) vulnerability in the API error logging functionality.Check if you run itEPSS 0.29%Jan 9, 2026
- High7.5GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionality.Check if you run itEPSS 0.32%Jan 9, 2026
- High7.7GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in the search bar functionality.Check if you run itEPSS 0.32%Jan 9, 2026
- High8.9GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the application does not verify the authenticity of client requests.Check if you run itEPSS 0.24%Jan 9, 2026
- Medium6.5Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4.0.0, LTS2025 release version 8.3.1.10, LTS2024 release versiCheck if you run itEPSS 1.53%Jan 9, 2026
Sort