Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files.Check if you run itEPSS 0.27%Dec 8, 2025
- Medium4.6IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.16%Dec 8, 2025
- Medium6.5IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtaCheck if you run itEPSS 0.27%Dec 8, 2025
- Medium6.3A vulnerability was determined in Ilevia EVE X1 Server up to 4.6.5.0.eden.Check if you run itEPSS 1.63%Dec 8, 2025
- Low2.7IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the applicationCheck if you run itEPSS 0.22%Dec 8, 2025
- Medium4.3IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose senCheck if you run itEPSS 0.21%Dec 8, 2025
- Medium6.5IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation oCheck if you run itEPSS 0.29%Dec 8, 2025
- High7.1The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy toCheck if you run itEPSS 0.30%Dec 8, 2025
- Medium5.3A vulnerability was found in Jihai Jshop MiniProgram Mall System 2.9.0.Check if you run itEPSS 0.23%Dec 8, 2025
- Medium6.9A vulnerability has been found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 8, 2025
- High7.0In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition.Check if you run itEPSS 0.07%Dec 8, 2025
- Medium5.5In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check.Check if you run itEPSS 0.07%Dec 8, 2025
- High7.8In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due to a logic error in thCheck if you run itEPSS 0.09%Dec 8, 2025
- Medium5.5In multiple locations, there is a possible permanent denial of service due to resource exhaustion.Check if you run itEPSS 0.07%Dec 8, 2025
- Medium6.9A flaw has been found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.48%Dec 8, 2025
- High7.3In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack.Check if you run itEPSS 0.10%Dec 8, 2025
- High7.8In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation.Check if you run itEPSS 0.11%Dec 8, 2025
- High7.8In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow.Check if you run itEPSS 0.11%Dec 8, 2025
- High7.8In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to improper input validation.Check if you run itEPSS 0.08%Dec 8, 2025
- Medium6.5In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion.Check if you run itEPSS 0.47%Dec 8, 2025
- High7.8In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value.Check if you run itEPSS 0.08%Dec 8, 2025
- High7.8In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy.Check if you run itEPSS 0.08%Dec 8, 2025
- High7.8In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the code.Check if you run itEPSS 0.09%Dec 8, 2025
- High8.8In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure.Check if you run itEPSS 0.38%Dec 8, 2025
- High7.8In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation.Check if you run itEPSS 0.10%Dec 8, 2025
Sort