Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticaCheck if you run itEPSS 0.22%Mar 25, 2026
- High7.7GitLab has remediated an issue in GitLab EE affecting all versions from 15.4 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated usCheck if you run itEPSS 0.19%Mar 25, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticatedCheck if you run itEPSS 0.18%Mar 25, 2026
- High8.1GitLab has remediated an issue in GitLab CE/EE affecting all versions from 7.11 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticatCheck if you run itEPSS 0.36%Mar 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticateCheck if you run itEPSS 0.20%Mar 25, 2026
- Critical9.8thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user input is concatenated into a shell commanCheck if you run itEPSS 2.45%Mar 25, 2026
- Critical9.8node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR.Check if you run itEPSS 1.77%Mar 25, 2026
- Critical9.8textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors.Check if you run itEPSS 2.57%Mar 25, 2026
- Critical9.8pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter.Check if you run itEPSS 2.56%Mar 25, 2026
- High8.8GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect installations thaCheck if you run itEPSS 0.45%Mar 25, 2026
- High7.5GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticatedCheck if you run itEPSS 0.48%Mar 25, 2026
- High7.5If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.Check if you run itEPSS 1.72%Mar 25, 2026
- High7.5pf4j before 20c2f80 has a path traversal vulnerability in the extract() function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip SlipCheck if you run itEPSS 0.89%Mar 25, 2026
- Critical9.8An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c componentCheck if you run itEPSS 0.51%Mar 25, 2026
- High8.8An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py componentsCheck if you run itEPSS 0.36%Mar 25, 2026
- High8.8Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.Check if you run itEPSS 0.70%Mar 25, 2026
- Critical9.8In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.Check if you run itEPSS 0.56%Mar 25, 2026
- Critical9.8In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.Check if you run itEPSS 0.56%Mar 25, 2026
- Critical9.0In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.Check if you run itEPSS 0.35%Mar 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions could have alCheck if you run itEPSS 0.27%Mar 25, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticatedCheck if you run itEPSS 0.43%Mar 25, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticateCheck if you run itEPSS 0.43%Mar 25, 2026
- High8.8A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated attackers within network range to overwriCheck if you run itEPSS 0.41%Mar 25, 2026
- High7.2A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32.Check if you run itEPSS 0.34%Mar 25, 2026
- High7.7An issue in Eufy Homebase 2 version 3.3.4.1h allows a local attacker to obtain sensitive information via the cryptographic scheme.Check if you run itEPSS 0.13%Mar 25, 2026
Sort