Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic.Check if you run itEPSS 0.86%Dec 3, 2025
- High7.5A flaw was found in Undertow that can cause remote denial of service attacks.Check if you run itEPSS 1.46%Dec 3, 2025
- Critical9.7DeepChat is a smart assistant uses artificial intelligence.Check if you run itEPSS 0.65%Dec 3, 2025
- Medium5.0Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.18%Dec 3, 2025
- High7.2Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online.Check if you run itEPSS 1.83%Dec 3, 2025
- High8.8NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path.Check if you run itEPSS 0.45%Dec 3, 2025
- High8.7Claude Code is an agentic coding tool.Check if you run itEPSS 0.74%Dec 3, 2025
- High7.5NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input.Check if you run itEPSS 0.68%Dec 3, 2025
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads.Check if you run itEPSS 0.97%Dec 3, 2025
- Low3.7Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.32%Dec 3, 2025
- Medium6.5Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.56%Dec 3, 2025
- High7.3MCP Gateway allows easy and secure running and deployment of MCP servers.Check if you run itEPSS 0.46%Dec 3, 2025
- High7.9GZDoom is a feature centric port for all Doom engine games.Check if you run itEPSS 0.15%Dec 3, 2025
- Low2.7In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role tCheck if you run itEPSS 0.38%Dec 3, 2025
- High8.0In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permisCheck if you run itEPSS 0.50%Dec 3, 2025
- Medium5.3In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated atCheck if you run itEPSS 0.41%Dec 3, 2025
- High8.0In Splunk Enterprise for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assCheck if you run itEPSS 0.50%Dec 3, 2025
- Low2.4In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.6, 10.0.2503.7, and 9.3.2411.117, a user who holds a role wCheck if you run itEPSS 0.30%Dec 3, 2025
- Medium5.4In Splunk MCP Server app versions below 0.2.4, a user with access to the "run_splunk_query" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCPCheck if you run itEPSS 0.24%Dec 3, 2025
- Low3.5In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.10, 10.0.2503.8, and 9.3.2411.120, a low-privileged user thCheck if you run itEPSS 0.24%Dec 3, 2025
- Critical9.3TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the Boa formWsc hCheck if you run itEPSS 4.25%Dec 3, 2025
- High7.5Masa CMS is an open source Enterprise Content Management platform.Check if you run itEPSS 0.39%Dec 3, 2025
- High8.8Masa CMS is an open source Enterprise Content Management platform.Check if you run itEPSS 0.21%Dec 3, 2025
- Medium5.4A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3.Check if you run itEPSS 0.09%Dec 3, 2025
- Critical9.8Masa CMS is an open source Enterprise Content Management platform.Check this weekEPSS 13.14%Dec 3, 2025
Sort