Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificateCheck if you run itEPSS 0.49%Dec 2, 2025
- Medium6.4A container privilege escalation flaw was found in certain CodeReady Workspaces images.Check if you run itEPSS 0.19%Dec 2, 2025
- High7.7The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components.Check if you run itEPSS 0.30%Dec 2, 2025
- High8.5JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM during agent uninstall orCheck if you run itEPSS 0.19%Dec 2, 2025
- Medium5.3Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.Check if you run itEPSS 0.20%Dec 2, 2025
- Medium5.3Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.Check if you run itEPSS 0.33%Dec 2, 2025
- Medium5.3Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.Check if you run itEPSS 0.20%Dec 2, 2025
- Medium6.5Arcade MCP allows you to to create, deploy, and share MCP Servers.Check if you run itEPSS 0.33%Dec 2, 2025
- High7.6The MCP Python SDK, called on PyPI, is a Python implementation of the Model Context Protocol (MCP).Check if you run itEPSS 0.54%Dec 2, 2025
- High7.6MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.54%Dec 2, 2025
- Low2.7ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check if you run itEPSS 0.68%Dec 2, 2025
- Medium5.4The BigFix SaaS's HTTP responses were missing some security headers.Check if you run itEPSS 0.19%Dec 2, 2025
- High7.4Cacti is an open source performance and fault management framework.Check this weekEPSS 10.85%Dec 2, 2025
- Medium5.3Apptainer is an open source container platform.Check if you run itEPSS 0.25%Dec 2, 2025
- Medium4.5SingularityCE and SingularityPRO are open source container platforms.Check if you run itEPSS 0.17%Dec 2, 2025
- Critical9.0SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based upCheck if you run itEPSS 0.27%Dec 2, 2025
- High8.8Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted.Check if you run itEPSS 0.45%Dec 2, 2025
- Medium6.3A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37.Check if you run itEPSS 0.33%Dec 2, 2025
- Medium4.9The Upload.am WordPress plugin before 1.0.1 is vulnerable to arbitrary option disclosure due to a missing capability check on its AJAX request handler, allowing users such as contrCheck if you run itEPSS 0.29%Dec 2, 2025
- Medium6.5An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co.Check if you run itEPSS 0.55%Dec 2, 2025
- High7.5An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.Check if you run itEPSS 2.16%Dec 2, 2025
- Medium4.3An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.Check if you run itEPSS 0.93%Dec 2, 2025
- Medium4.8A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android.Check if you run itEPSS 0.37%Dec 2, 2025
- Medium5.3A weakness has been identified in Yohann0617 oci-helper up to 3.2.4.Check if you run itEPSS 0.44%Dec 2, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabiCheck if you run itEPSS 0.21%Dec 2, 2025
Sort