Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file.Check if you run itEPSS 0.19%Dec 16, 2025
- Medium4.8Spip 4.1.10 contains a file upload vulnerability that allows attackers to upload malicious SVG files with embedded external links.Check if you run itEPSS 0.32%Dec 16, 2025
- High8.7D-Link DAP-1325 firmware version 1.01 contains a broken access control vulnerability that allows unauthenticated attackers to download device configuration settings without authentCheck if you run itEPSS 0.73%Dec 16, 2025
- Critical9.3PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint.Check if you run itEPSS 0.67%Dec 16, 2025
- Medium5.1WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript.Check if you run itEPSS 0.24%Dec 16, 2025
- High7.0WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating directory path parameters.Check if you run itEPSS 1.01%Dec 16, 2025
- High7.1WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes.Check if you run itEPSS 0.27%Dec 16, 2025
- Medium5.1PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form.Check if you run itEPSS 0.57%Dec 16, 2025
- Medium5.1Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts.Check if you run itEPSS 0.24%Dec 16, 2025
- Medium5.1Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts.Check if you run itEPSS 0.24%Dec 16, 2025
- Critical9.3phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation.Check if you run itEPSS 0.62%Dec 16, 2025
- High8.5tRPC allows users to build and consume fully typesafe APIs without schemas or code generation.Check if you run itEPSS 0.40%Dec 16, 2025
- High8.9FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.27%Dec 16, 2025
- Medium6.5GLPI is a free asset and IT management software package.Check if you run itEPSS 0.29%Dec 16, 2025
- High8.3Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.Check if you run itEPSS 0.23%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: parisc: Avoid crash due to unaligned access in unwinder Guenter Roeck reported this kernel crash on his emulatedCheck if you run itEPSS 0.18%Dec 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page aCheck if you run itEPSS 0.45%Dec 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix sleeping in atomic context The following warning was seen when we try to connect using ssh to the dCheck if you run itEPSS 0.41%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire su_mutex before navigating configs hierarchy There is a race between operations that iterateCheck if you run itEPSS 0.21%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL The AXI crossbar of TH1520 has no proper timeout haCheck if you run itEPSS 0.21%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests coming from the same conteCheck if you run itEPSS 0.14%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error return value is set to tCheck if you run itEPSS 0.17%Dec 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer.ino and footer.nid is tCheck if you run itEPSS 0.43%Dec 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure last_fence is always updated Update last_fence in the vm-bind path instead of kernel managedCheck if you run itEPSS 0.13%Dec 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants oCheck if you run itEPSS 0.14%Dec 16, 2025
Sort