Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted Link ManagerCheck if you run itEPSS 0.31%Dec 10, 2025
- High7.5XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via sidCheck if you run itEPSS 0.58%Dec 10, 2025
- High7.5Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the file_get_coCheck if you run itEPSS 0.85%Dec 10, 2025
- High7.5Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDirecCheck if you run itEPSS 0.85%Dec 10, 2025
- Medium6.1Cross Site Scripting vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to obtain sensitive information via the login.php component.Check if you run itEPSS 0.26%Dec 10, 2025
- Medium6.5PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page.Check if you run itEPSS 0.39%Dec 10, 2025
- High7.6Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPCheck if you run itEPSS 0.27%Dec 10, 2025
- Medium6.1Taguette is an open source qualitative research tool.Check if you run itEPSS 0.26%Dec 9, 2025
- Critical9.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.51%Dec 9, 2025
- Low3.7Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.22%Dec 9, 2025
- Critical9.1ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code executioCheck this weekEPSS 10.56%Dec 9, 2025
- High7.4ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitraryCheck if you run itEPSS 0.54%Dec 9, 2025
- High8.4ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary coCheck if you run itEPSS 4.71%Dec 9, 2025
- Medium6.8ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitraryCheck if you run itEPSS 0.53%Dec 9, 2025
- Medium5.3ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write accesCheck if you run itEPSS 0.44%Dec 9, 2025
- High8.4ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the contCheck if you run itEPSS 9.54%Dec 9, 2025
- Critical9.1ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.66%Dec 9, 2025
- Medium5.6ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability.Check if you run itEPSS 0.13%Dec 9, 2025
- Medium6.2ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write.Check if you run itEPSS 0.65%Dec 9, 2025
- Medium6.2ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitraryCheck if you run itEPSS 0.49%Dec 9, 2025
- Critical9.1ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of thCheck if you run itEPSS 1.20%Dec 9, 2025
- Medium6.6The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container.Check if you run itEPSS 0.14%Dec 9, 2025
- Medium5.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.25%Dec 9, 2025
- High8.0ZITADEL is an open-source identity infrastructure tool.Check if you run itEPSS 0.30%Dec 9, 2025
- Critical9.3ZITADEL is an open-source identity infrastructure tool.Check if you run itEPSS 0.44%Dec 9, 2025
Sort