Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.Check if you run itEPSS 0.19%Dec 15, 2025
- High7.8A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.Check if you run itEPSS 0.29%Dec 15, 2025
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.24%Dec 15, 2025
- High7.8A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.Check if you run itEPSS 0.26%Dec 15, 2025
- High7.8A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.Check if you run itEPSS 0.26%Dec 15, 2025
- High7.8A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.Check if you run itEPSS 0.26%Dec 15, 2025
- High7.8A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.Check if you run itEPSS 0.29%Dec 15, 2025
- Medium5.3A weakness has been identified in CTCMS Content Management System up to 2.1.2.Check if you run itEPSS 0.45%Dec 15, 2025
- High7.8A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.Check if you run itEPSS 0.26%Dec 15, 2025
- Medium6.9Misskey is an open source, federated social media platform.Check if you run itEPSS 0.34%Dec 15, 2025
- High7.1Misskey is an open source, federated social media platform.Check if you run itEPSS 0.31%Dec 15, 2025
- High7.4FreshRSS is a self-hosted RSS feed aggregator.Check if you run itEPSS 0.70%Dec 15, 2025
- Medium5.1A security flaw has been discovered in CTCMS Content Management System up to 2.1.2.Check if you run itEPSS 0.46%Dec 15, 2025
- Medium5.1A vulnerability was identified in CTCMS Content Management System up to 2.1.2.Check if you run itEPSS 0.46%Dec 15, 2025
- Medium5.1ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.49%Dec 15, 2025
- High8.8Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constrainingCheck if you run itEPSS 0.43%Dec 15, 2025
- Medium5.3Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace wheCheck if you run itEPSS 0.29%Dec 15, 2025
- Medium6.7NVClient 5.0 contains a stack buffer overflow vulnerability in the user configuration contact field that allows attackers to crash the application.Check if you run itEPSS 0.22%Dec 15, 2025
- Medium4.8A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1.Check if you run itEPSS 0.25%Dec 15, 2025
- Medium5.3Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL parameter that allows attackers to bypass network restrictionsCheck if you run itEPSS 0.28%Dec 15, 2025
- High8.6Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the jquery plugin manager.Check if you run itEPSS 0.91%Dec 15, 2025
- Medium5.1Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into page content.Check if you run itEPSS 0.24%Dec 15, 2025
- Medium5.1Perch CMS 3.2 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript.Check if you run itEPSS 0.24%Dec 15, 2025
- High8.6Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface.Check if you run itEPSS 0.92%Dec 15, 2025
- High8.6Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints.Check if you run itEPSS 0.96%Dec 15, 2025
Sort