Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0.12.29, 24.0.12.28, 25.0.13.23, 26.0.13.Check if you run itEPSS 0.30%Dec 4, 2025
- High7.5Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a crafted request.Check if you run itEPSS 0.29%Dec 4, 2025
- High7.5Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.Check if you run itEPSS 0.29%Dec 4, 2025
- High7.5Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unspecified vectors.Check if you run itEPSS 0.29%Dec 4, 2025
- High7.5Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir function.Check if you run itEPSS 0.89%Dec 4, 2025
- High7.3This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control (RBAC) through dual dependency on frontend menu systems and baCheck if you run itEPSS 0.29%Dec 4, 2025
- High8.8An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.Check if you run itEPSS 0.76%Dec 4, 2025
- High7.2An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.Check if you run itEPSS 0.81%Dec 4, 2025
- High7.8An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.Check if you run itEPSS 0.15%Dec 4, 2025
- Critical9.8An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.Check if you run itEPSS 0.50%Dec 4, 2025
- Critical9.8The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.Check if you run itEPSS 0.39%Dec 4, 2025
- Critical9.8An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.Check if you run itEPSS 0.46%Dec 4, 2025
- Critical9.8ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.Check if you run itEPSS 1.98%Dec 4, 2025
- Critical9.8ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.Check if you run itEPSS 8.49%Dec 4, 2025
- High8.6## Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest APICheck if you run itEPSS 0.28%Dec 3, 2025
- High7.1LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 0.38%Dec 3, 2025
- Medium6.4MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it.Check if you run itEPSS 1.48%Dec 3, 2025
- Critical9.9Cal.com is open-source scheduling software.Check if you run itEPSS 0.97%Dec 3, 2025
- Medium5.0Step CA is an online certificate authority for secure, automated certificate management for DevOps.Check if you run itEPSS 0.16%Dec 3, 2025
- Medium6.5An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate.Check if you run itEPSS 0.30%Dec 3, 2025
- Medium4.6Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address wCheck if you run itEPSS 0.66%Dec 3, 2025
- High8.7Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android,Check if you run itEPSS 0.34%Dec 3, 2025
- Medium5.5Rhino is an open-source implementation of JavaScript written entirely in Java.Check if you run itEPSS 0.29%Dec 3, 2025
- Medium4.7Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page.Check if you run itEPSS 0.23%Dec 3, 2025
- High8.1Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a maliciousCheck if you run itEPSS 0.39%Dec 3, 2025
Sort